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VOTER SYSTEM 
IN DISARRAY 
ACROSS USS. 


Decentralized, disparate databases leave 
door open to multiple registrations, fraud 


BY CAROL SLIWA, LEE 
COPELAND AND DON TENNANT 
Dead voters in Florida? 

Scores of Democratic and 
Republican party officials are 


information technology 


tems would ensure that prop- 


hunting for any shred of evi- | 


dence that fraudu- 
lent activity might 
have swayed the 
razor-thin margin 
the country’s two top candi- 
dates for president. 

In this day and age, officials 
might have hoped that technol- 
ogy could prevent dead, multi- 


ply registered or any other in- | 
eligible voters from casting a | 
ballot. And they might have ex- 


pected that frequently updated 


OYOTEM MENDED, 
HMO QUTSOURCES | 


NEWSPAPER 


Oxford spent two years 


fixing botched project | 


| Entex Consulting Services and 


BY KIM S. NASH 
Oxford Health 
which suffered 


Plans _Inc., 


according to sources 


erly registered voters could 


find their names on the rolls | 


when they arrived to vote. 
Instead, political observers 
will find that vot- 


ELECTION2000 oo registered 


and tracked by a 


separating | patchwork quilt of technology 


systems that can vary as wildly 
the weather in different 
parts of the country. Not only 
will they find no movement 


as 


afoot to create a national voter | 


registry, but they will also see 
states struggling to establish 
and update their own central- 


Voter System, page 6 | 


inside 
and close to the company. 
The decision to hire Com- 


puter Sciences Corp. in a five- | 


year deal — estimated at $270 
million to $330 million — came 


after seven months of evalua- 


tion of proposals from CSC, 


| IBM, the sources said. 


multimillion- | 


dollar losses in 1997 and 1998 | 


after a botched systems up- 


grade, plans to outsource most | 
of its information technology | 


operations, starting next year, 


A spokeswoman for the 


Trumbull, Conn.-based health | 
maintenance organization con- | 
firmed plans to outsource its | 


U.S. MAY FACE NET-BASED HOLY WAR 


help desk and desktop support; 
that announcement is due 


Oxford, page 16 | 
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Hooking up with a young company — with its skimpy 


track record and software that’s still being debugged — is 
certainly a gamble. It requires extra vigilance to manage the 


risk, but users say the payoff can be tremendous: access to 
advanced technology that provides a competitive advantage. 
Which start-ups are likely to really pay off? Check out Comput- 


erworld’s Top 100 Emerging Companies to Watch in 2001. 


Experts say sites are 


woefully unprepared | 
BY DAN VERTON 
As hacker groups in the Mid- 


| dle East threaten to launch a | 
| “cyber-Jihad,” 
| holy war, against companies 


or electronic | 


with ties to Israel, security ex- | 


108 COMPANIES 10 WATCH 


Supplement begins after page 72. 


perts said Internet security at 
most U.S. companies remains 


woefully inadequate to defend | 
| against such attacks. 


Pro-Palestinian hacker groups, 


| some of which have links to in- 
ternational terrorist Osama bin | 


Laden and anti-U.S. terrorist or- 
ganizations, have vowed to 
launch a new round of cyberat- 


tacks as part of an ongoing wave 
of violence that began this fall 
between Israelis and Palestini 
ans. As of last week, pro-Pales- 
tinian hackers had attacked as 
many as 40 Web sites around 
the world, and _ pro-Israeli 
groups had hit more than 15. 

To date, both have 
managed to penetrate Web 
servers and deface Web pages 


sides 


as part of a sustained disinfor- 
Cyberwar, page 141 
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6 WEBSITE PLAYS a key 


election role: Voters swamp 
Florida’s site, but Gore staffers 
manage to get data to spur the 


recant of his concession. 


PRIVACY WILL REMAIN 
a political football for high- 
tech firms, no matter how the 


vote goes. 


RESEARCH PAYS OFF for 


firms using Web exchanges to 
sell or license patented tech 


nology they haven’t marketed 


BANKS GIVE IN to a de- 


mand for aggregators that link 
many accounts, after strongly 


resisting 


SERVICES CONQUER 


product-heavy Comdex as 
the ASP model proliferates. 


DOT-COMS CONTINUE 


to crash; Pets.com, Mother- 
Nature.com and Furniture.com 
burn out their capital. 


ORACLE'S STOCK DIPS as 


software sales remain lackluster 


and users hesitate to upgrade. 


INSTANT MESSAGING may 


explode this year as standards 


develop. 


LUCENT RESTRUCTURES 


management and cuts 240 jobs 
in a push to integrate sales and 


service. 
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A GUN PLATFORM in the 


North Sea provides a home for 
a data haven that promises to 
destroy clients’ data rather 
than hand it over to the feds 
DIVERSITY 


MINORITIES SOMETIMES 


have to act with daring to make 


their marks in IT, Kathleen 
Melymuka writes. 


WEB SITES ARE FAILING 


to attract sufficient advertising 
or revenue, SO some are turn 
ing to outsourcers to sell their 
for a cut 


products directly 


WORKSTYLES 


MARRIOTT OFFERS its 


hospitality culture in the offic 
and a job development pro 
hoose 


gram in which workers « 
their IT paths. 


ARE CHIEF PRIVACY ofti 


cers, the newest must-have 
executives, taken seriously? 


PRIVACY GAFFES are easy 


to make and hard to recover 
from; here are the ones that 
can sink you the quickest 


MARK HALL says techno 
junkies like to play with “toys,” 
but meeting the people behind 
them is just as crucial; that’s 
why we have a Comdex show. 


DON TENNANT takes a 


whimsical look at Microsoft’s 
response to hacker attacks on 
its internal network. 


94 


ENERGY DEPARTMENT 


turns to searchable video 

for fast access to archives 

for its nuclear emergency 
response team. 

HACK OF THE MONTH 
ONLINE RETAILERS must 
shore up their security as the 
holiday shopping season nears, 
says Deborah Radcliff. 
SECURITY JOURNAL 

JUDE GETS the green light 
to recruit more staff and is 
amazed by candidates’ salary 
demands. 

FUTURE WATCH 

MASSIVE PARALLELISM 
offered by DNA computing in- 
trigues scientists, but it’s not 


- or quick. 


easy 


SQL SERVER 2000 stacks 
up against the competition 
from Oracle and IBM, say early 


users. 


PREDICTIONS OF impend 


ing doom for the router are 
premature, but there are 


changes ahead, say experts 


ALLAN E. ALTER says 


the open-source software 
movement could open up the 
possibility of new methods 
of leadership. 


DAVID FOOTE writes that 


many popular IT salary studies 
are flawed. 


THORNTON MAY says that 


trust will define the future of 
the digital economy. 


SELLING TEENS 
ON TECHNOLOGY 


Nerds. Geeks. Workaholics. That's still 
many teens’ image of IT workers today. 
Their view: Using technology - great! 
Working in technology - anything but 
cool. But a new national campaign be- 
ing launched this month called GetTech 
hopes to change that negative image. 
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ready for 
prime time? 
\fter read 
ing the arti 
cle by We st 


soe Echit 
Coast Fadltor 


Mark Hall 
(left) on page 
1O8, post 
Vour opinion 
in our interactive Linux Forum. www. 


computerworld.com/linuxforum 
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Online privacy is getting to be like 
the weather, writes West Coast Bu 
reau Chief Pimm Fox in the E-Com- 
merce Community: Everyone has an 
opinion, but nobody seems to do 
much about it. www.computerworld. 
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60 PETER G.W. KEEN writes 


that business needs to focus 
on a different message regard 


ing wireless technology 


JOE AUER advises that be 
fore signing an outsourcing 
contract, you should be sure 


service levels are specified. 


FRANK HAYES offers his 


10 commandments for beating 
age bias in IT. 


www.computerworld.com 





NEWS 
Florida's Election Web Site Swamped by Millions of Hits 


Up-to-date info swayed Gore’s decision 


BY PATRICK THIBODEAU 
It was supposed 
but routine election night for 
the Florida Department of State 
IT department. But in the span 
of 24 hours, its Web site was be 


to be a busy 


sieged by hordes of visitors, and 


it would ultimately play a small 
but perhaps critical role in the 
election night drama. 

While 


trouble accessing the detailed 


many visitors had 
election results, some did get 


through election night. Among 


them were members of Vice 
President Al Gore’s campaign, 
who were searching for the lat- 
est voting tallies as they fought 
to keep their campaign alive. 
As new numbers were post- 
ed on the Web site, showing a 
gap with 
W. Bush 


they helped lead to Gore’s de 


narrowing voting 


Texas Gov. George 


Online Vote Bidding Declared a Web Hoax 


Case highlights 
jurisdiction woes 


BY LEE COPELAND 

After changing its Web address 
twice to avoid the long arm of 
U.S. 


halted its quest to sell ballots 


law, Vote-Auction.com 
to the highest bidder and said 
it had been a hoax all along. 

In an apparent effort to draw 
attention to the link between 
campaign financing the 
ballot box, the Web site offered 
to proffer votes to the highest 


and 


bidder. But analysts and ex- 


perts said the prank under 
scores a need to address the ju 
risdiction issues that arise from 
Internet-based businesses 


“We've 
gambling sites try to exploit 


increasingly seen 
the legal differences in differ 
ent areas by moving their ser- 
vices to new locations,” said 
Jay Stanley, an Internet policy 
analyst at Forrester Research 
Inc. in Cambridge, Mass. “You 
can expect an increased 
amount of cooperation be 
tween consumer-protection 
and antitrust agencies in dif- 
ferent countries to address the 
a-geographical nature of the 
Internet.” 

The Vote-Auction.com 
purportedly allowed voters to 
sell their votes to the highest 


bidder in blocks broken down 


site 


by state. The winning bid price 
was to be divided among vot- 
ers from that state who had 
registered on the site. 

On the eve of the election 
last week, 1,116 Massachusetts 
voters allegedly had registered 
on the site to sell their votes, 
which caused that state’s attor- 
ney general's office to seek a 
court injunction to shut down 
Vote-Auction.com. 


The site, launched 
parent lark by New York grad- 
uate student James Baumgart 


as an ap- 


ner, was already ordered to be 
shut after 
running afoul of the Chicago 
Board of 


sioners 


down last month 


Election Commis- 


under the original 


www.voteauction.com name. 
As part of the court order in 
the case, the judge specifically 
said Baumgartner’s site could- 
n’t reappear on the Web under 
a different name. 

But the site resurfaced under 
its new name and owners, run 
ning on a server operated by an 
Austrian And 
though Massachusetts state of. 
the 


once 


company. ven 
ficials won an injunctio1 


site changed its name 


http://vote-auction. 


again, to 


Continued from page 1 


Voter System 


ized voter registries 
The 


grants each state control 


federal government 
ver 
its own voter registration sys- 
tems. The most recent Federal 
Election (FEC) 
study, from 1997, showed that 


Commission 


just 10 states had real-time, on- 
line access to a centralized vot- 
er site. At the other extreme, 16 
states had no statewide data- 
all. A Computerworld 
survey of a 
showed that while some have 
many 


base at 
dozen states 
made others 
are still struggling to update 
their IT systems. 


progress, 


“Clearly, there are a lot of 


things that could get fixed and 
probably should get fixed,” 
said Kimball Brace, president 
of Election Data Services Inc., 
| the Washington-based consul- 
| tancy that the FEC commis- 


| 
| 
| 
| 
| 
| 
| 


enemy.org, on Election Day. 
The issue of legal jurisdic- 
tion is a contentious one, said 
Jorge Contreras, an attorney 
with the Internet law group at 
Hale and Dorr LLP in Boston. 
“If you have an activity that is 


illegal in the U.S., even if it’s 
the 


country, it is subject to U.S. 


conducted from outside 
law,” he said. 

Online vote-swapping ser 
vices also sprang up during 
weeks leading up to the elec 
tion. 
VoteExchange.com both tried 


Voteswap2000.com and 


to persuade Democratic voters 
in states heavily favoring ei- 
ther Al W. 
Bush to exchange votes with 


Gore or George 
Ralph Nader supporters in hot 
ly contested states. D 


sioned to conduct the study 
“One of the big problems is 
that many jurisdictions don’ 
have a lot of money.” 
Wisconsin, one of the states 
with no centralized registry, al 
lows voters to register on E lec 
tion Day. Last 
Madison, more 
people took advantage, forcing 
the city to print out extra voter 


Tuesday in 
than 50,000 


registration cards, noted Ray 


Risher, the city’s director of 


revenue. 

There were no on-site com 
puters or master lists to check 
names. But Fisher the 
state was more concerned with 


said 


making it as easy as possible 
for people to register than it 
was with the possibility that 
someone may have registered 
and voted twice. 

“It would be nice to have a 
computer system, but I don’t 
think we could afford the price 
of the equipment,” Fisher said. 
“Plus, we are dealing with poll 
workers, many of whom are el- 


retract his earlier 
concession. “The data off the 
Web site was compared with 
the [results collected by cam- 
and 


said 


cision to 


paign members], those 
were 
campaign spokesman Dag Vega. 

Of course, the Web 


part in helping to persuade the 


consistent,” Gore 


site’s 


Gore campaign to keep fight- 
ing wasn’t immediately known 
to the department’s IT work- 
ers. They were too busy. 

By Wednesday 
traffic 
Web 
three times that of a 
normal election load 
and rapidly rising. IT 


morning, 


on the department's 


servers was 


workers were scram- 
bling to add more re- 
sources to keep the 
site from completely 
bogging down. 

“It’s so overloaded 
right now [Wednes- 
day 
just 
[that says], “Too busy, 
too busy, too busy,’ ” 
said IT staffer, 
who quickly handed 
off inquiries to De- 


morning], you 


get a message 


one 


partment of State 
CIO Gene Bryan. 

The state Web site 
typically gets around 


450,000 hits during 


derly and do this as part of 
their civic duty. Most would 
not be familiar with the opera 
tion of a computer.” 

Another of last week’s most 
hotly contested states, Florida, 
a centralized database in 
Tallahassee. A state law that 
took effect Jan. 1, 1998, estab- 
the 
connected to 


has 


lished it. But state’s 67 
counties aren't 
the central repository via the 
Internet or any private net- 
work, and updates aren’t done 


in real time. 


“You're talking about a lot of 


money to put computers and 
networking [technology] in all 
the offices of the supervisors 
{of elections],” said Kurt 
Browning, the election super- 
visor in Pasco County, Fla., for 
the past 20 years. “It was like 
$15 million to $17 million.” 

And election supervisors 
weren't exactly enthusiastic 
about the idea, according to 
Browning. The supervisors are 
independently elected consti- 


TEXAS GOV. 
George W. Bush 
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Tied Up 


The close vote has given Flori- 
da’s Department of State an IT 
challenge: 

= Typical election: About 450,000 hits 
g This election: 5.2 million-plus 


an election, but Bryan said he 
expected this race to bring 
around 700,000 hits. To pre 
pare, his team planned for 24- 
hour staffing to keep the site 
updated and running smooth- 
ly. But traffic quickly soared as 
numerous news sites inserted 
Florida’s Web 
NBC even showed a 
page view 
television. 

By midafternoon 
Thursday, traffic had 
exceeded 5.2 million 
hits, said Bryan. The 
department quickly 
added a fourth Web 
server around mid- 
day to help ease the 
crunch. “Hopefully, 
quite a few people 
are getting in, and 
only a few are getting 
a busy signal,” Bryan 
said. 

Nobody expected 
this,” he “Of 
course, nobody ex- 
pected the vote to be 
so darn close all over 
the country.” D 


links to site. 


live on 


said. 


tutional officers in Florida, and 
“there were some supervisors 
that got their backs bent out of 
shape when they found out 
Tallahassee wanted to create a 
central voter registration data- 
said Browning, noting 
that he favored the idea. 
Instead, the state opted for a 
central voter file that cost far 
less. Updates from the coun- 


base,” 


ties are now required on a 
quarterly basis, said Wesley 
Wilcox, a systems administra- 
tor for St. Lucie County’s su- 
pervisor of elections 

Various checks are made to 
ensure that residents are eligi- 
ble to vote, but that doesn’t 
catch every problem. St. Lucie 
County does birthday and So- 
cial Security number checks 
and periodically sends voting 
records to be “cleaned” against 
a national change-of-address 
database. 

“They come out with a prob- 
ability of death [as in], ‘There’s 
a 75% chance this person is 
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High-Iech Agenda 
Unaltered by Vote 


Privacy likely to be key issue next year, but 
industry is divided on how to approach it 


BY PATRICK THIBODEAU 
LTHOU THI 
election has nar 
rowed the party 
gap in Congress, 
it hasn’t funda- 

mentally changed how the 

high-tech industry will ap- 
proach legislative issues in the 
upcoming session. High-tech 
groups and companies have so 
far enjoyed bipartisan consen- 
and 
they expect that to continue. 

But they face one big trouble 

spot: privacy. 

Privacy legislation is likely 
to take center stage when the 
new Congress convenes in ear- 
ly January. But the high-tech 
industry is divided on how to 
approach the issue, and efforts 
are under way to build a con- 
sensus. 

Some firms, including Intel 
Corp., are in favor of some lim- 
ited privacy regulations. But 
others, led by the Arlington, 
Va.-based Information 


GH 


sus on many key issues, 


Tech- 


dead,” Wilcox said. “Typical- 
ly, we don’t act on that stuff. 
Most are notifications from a 
spouse or relative.” 

Even states with 
real-time online 
challenges. 
counties the option to use its 
Texas Voter Registration Sys- 
tem (TVRS). A total of 135 coun- 
ties that don’t have 
tems avail themselves of TVRS, 
using client software that con- 
nects to the database via the In- 
ternet or a terminal server. 

Yet scores of larger counties 
in Texas keep their own voter 


available 
systems face 


Texas gives its 254 


local sys- 


registration systems and up- 
date TVRS using tapes or file 
transfer protocol files. Others 
connect to TVRS using client 
software for updates. And 
some communities slip 
through the cracks. The rural 
desert county of Loving, near 
El Paso, has more registered 
voters than residents. 

“Texas gives out money 
based on the number of voters 


nology Association of America 
(ITAA), oppose any 
comprehensive privacy legis- 
lation, fearing unintended con- 
sequences for high-tech firms. 

“The industry is still sorting 
said 


Intel’s vice 


out where it is on privacy, 
Michael Maibach, 
president for government af- 


fairs and its top executive in 


Coaxing Congress 


The top high-tech issues for 
the coming year include: 

@ Privacy: Companies are di- 
vided on the need for priva- 
cy legislation and are trying 
to reach consensus. 

@ Taxes: The Internet tax 


moratorium expires next 
October. 


@ Labor: Now that the H-1B 
visa issue is settled, the fo- 
cus will shift to education 

and training assistance. 


@ Trade: Further reductions 
in barriers will be sought. 


you’ve got. It’s basically a 
county-by-county system,” said 
Jim Edwards, systems manager 
for the secretary of state. “The 
places like Loving County that 
need [money] the most get it 
the least.” 

Edwards added, “One of the 
problems we've got is we need 
to standardize.” 

The lack of uniform stan- 
dards sometimes can prevent 
states with updated technolo- 
gy from making all the checks 
they might like. Tennessee has 
a central voter registry that’s 
accessible online, but there’s 
no system in place to cross-ref- 
erence voter lists with Ten- 
nessee’s eight bordering states. 

“We would like to be able to 
match with them, but the prob- 
lem comes down to Social Se- 
curity numbers and whether 
we can get that information,” 
said Steve Griffy, assistant di- 
rector of information systems 
for Tennessee’s secretary of 

| state, noting that some neigh- 


kind of 


W: ashington. To the extent that 
the industry appears united, he 
said, “high-tech is pretty good 
at convincing the U.S. govern- 
ment of the best policy.” 
Citing ongoing discussions, 
Maibach 
just what he would like 
in a privacy bill. 
One of the key 


for supporting privacy legisla- 


declined to disclose 


to see 
motivators 


tion is the notion that federal 
laws would preempt state pri- 
vacy laws, which have the po- 
tential to create a patchwork 
of regulations. But Harris 
Miller, president of the ITAA, 
contends that support of pri- 
vacy legislation as 
preempting state laws could 
deliver “the worst of all possi- 
ble worlds” because there is 
that 


will risk upsetting the states 


no guarantee Congress 
and preempt state law. 

In any case, the real 
card in the 


wild 
changing of the 
in Washington will be 
the presidential appointees. 
The new administration will 
have its 
technology 


guard 


greatest 
policy 
appointments, 


impact on 
largely 


through and a 


key one will be the selection of 


boring states don’t request vot- 
ers’ Social Security numbers. 

Right now, some states can’t 
even settle on a uniform for- 
mat for voter registration. Ron 
Michaelson, executive director 
of Illinois’ State Board of Elec- 
tions, uniform format 
“has been required by law for 
15 years but has not been done 
due to lack of funding.” 

Another source of problems 
for Illinois and other states has 
been the National Voter Regis- 
tration Act, better known as the 
“motor voter” law, which lets 
voters register by mail or when 
they get their driver’s licenses 
Because the law prohibits vot- 
ing districts from purging inac- 
tive voters from the rolls, they 
are left with “rolls that are not 
as clean as they used to be,” 
Michaelson said. 

Even the intended benefits 
of the motor voter law aren’t 
always realized. Virginia en- 
countered a problem with resi- 
dents who thought they had 


said a 


a means of 


the chief of the U.S. Depart- 
ment of Justice’s (DOJ) 
trust division, w 


anti- 
hich has spear 
headed the Microsoft case. 

But the Microsoft case 
be moving too swiftly for any 
new president to attempt to 
derail the U.S. Court of Ap- 
peals process with a push for a 
settlement. The 
will hold oral 
26 and 27, and 


chief “is not going to be 


may 


appeals court 
arguments Feb 


a new antitrust 


firmed by the time of oral ar 
guments — there’s no way,’ 
said Ken Wasch, 
the Software & Information In 
a Washing 


president of 


dustry Association, 
ton-based trade group that’s 
backing the DOJ in its effort to 
break up Microsoft. 

If a settlement effort is initi- 
ated by 
it will likely come 


a new administration, 
after the ap 
peals court makes its decision, 
said Stephen D. Houck, former 
lead trial 
involved in the 
against Microsoft and now an 
attorney at Reboul, MacMur 
ray, Hewitt, Maynard & Kristol 
in New York. 

Regardless of the new presi- 
dent’s feelings a 
the federal 
has to work with the 19 states 
that are party to the suit. Those 
states “would 
able influence” 


counsel for the 19 


states case 


bout the case, 


government also 


have consider- 
in any decision 
to settle, said Houck. The 
“have been involved in 


all the strategic decisions.” D 


states 


registered at the 
Motor Vehicles (DMV) only to 
discover that they weren't reg- 
istered when they arrived 
the polls. Technology 
help solve that problem if ap- 
plications could be routed 
electronically from the DMV 
to the Virginia Voter Registra- 
tion System. But right now, un- 
der Virginia law, the signature 
must be original and can’t be 
scanned or digitized. 

Virginia’s Board of Elections 
has been pushing for electron- 
ic signatures to be made legal, 
but it has had no luck so far. 

That’s also true for anyone 
hoping that a national 
registry might bring some or- 
der to the chaos. 

“I think sometime we 
have a real-time federal reg- 
istry,” said Browning, 42. “I hope 
I live long enough to see it.” D 


could 


voter 


will 


Reporters Michael Meehan and 
Marc L. Songini contributed to 
this report. 


Division of 


Online Registrations 
In Ilinois Were Invalid 


People in Illinois who registered to 
vote via a Web site were in for a 
surprise last week: They couldn't 
vote. Any civic organization can 
register voters, but it must use par- 
ticular paper forms. “We indicated 
the requirement to online voter reg- 
istration outlets that we knew of,” 
said Ron Michaelson, executive di- 
rector of the Illinois State Board of 
Elections. “Some informed their 
clients; some evidently did not.” 


SS eR ESE CRY er ce 


How the Media Sites 
Held Up Election Night 


E-commerce reporting firm Keynote 
Systems Inc. in San Mateo, Calif., 
found delays on some news and po- 
litical Web sites during the election. 
For example, Keynote reported 
that MSNBC's average response 
time between 6 and 9 p.m. EST 
Tuesday was 32.54 seconds, with 
the page loading 59% of the time. 
Media Metrix Inc. in New York said 
MSNBC’s number of unique visitors 
increased from 747,000 to 2.64 
million between Nov. 5 and 7. 
Some sites increased their load but 
performed just fine, Keynote said. 
Election reporting put CNN.com, 
which went from 841,000 unique 
visitors on Nov. 5 to 3.5 million on 
Election Day, in that group. 


NSCS NCR 


GOP Goes Offline 
After Hit by Hacker 


The Republican National Commit- 
tee’s Web site was temporarily tak- 
en down early on Election Day after 
an intruder placed a rambling tirade 
against Texas Gov. George W. Bush. 
The anonymous hacker included a 
link to the Web site of Vice Presi- 
dent Ai Gore’s campaign at the end 
of the message. Both www.rnc.org 
and www.gop.org, which also di- 
rects users to the GOP committee's 
Web site, were affected. At noon, a 
two-sentence text message indicat- 
ed the site was being restarted. 

The hacking method used was 
probably a fairly common one, such 
as Remote Data Service scripting, 
which lets attackers take control of 
Web servers, said David Kennedy, 
director of research at TruSecure 
Corp., an Internet security consul- 
tancy in Reston, Va. 
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Corporate Secrets Up for 
Grabs at New Exchanges 


Companies putting patents, trademarks and more on sale 


BY JULIA KING 
IKI 


giants, 


MOST corporate 
Procter & 
Co. (P&G) 


and General Electric 


Gamble 
Co. used to guard 
their patents, trademarks and 
other intellectual property 
more closely than the crown 
jewels 

But now, under pressure to 
fatten revenue, they and other 
companies are offering every- 
thing from prized research 
secrets to 


information 


and-development 
sharp 
technology systems for sale at 
new online intellectual-prop- 


in-house 


erty exchanges. 

The buyers are other big 
companies looking to slash 
R&D costs by buying the fruits 
of others’ research. 

About 20 such exchanges, 
including Cambridge, Mass. 
based Yet2.com and Pasadena, 
Calif.-based The Patent & Li- 
cense Exchange Inc. (http: 
pl-x.com) have either been an- 
are up and run- 
week, St. Cloud, 

Global Com- 

Communication 


nounced or 
ning. Last 
Minn.-based 
merce and 
Inc. leaped in with Newldea- 
Trade.com, a free online forum 
for buyers and sellers of inven- 
tions, trademarks and patents. 
Also last week, in a slight 
twist on the same theme, 
Mountain View, Calif.-based 
2000Ideas.com launched what 
it calls 
marketplace,” 
ual consumers and others can 


a “people-to-business 
where individ- 
submit ideas and technologies 
to the people within compa- 
nies who are responsible for 
product 
The Coca-Cola Co., Daimler- 
Chrysler AG, International Pa- 
per Co. and S.C. Johnson & Son 
Inc. are among the market- 
place’s inaugural corporate 
members. 

What the business-to-busi- 
ness marketplaces offer, users 
say, is a fast, efficient and ex- 
tremely low-cost way to trans- 
fer technology and build rev- 
enue on inventions that other- 


new development. 


wise might not have seen the 
light of day. 
“A year and a half ago, we did 


a survey and realized we were 


r- 


spending $1.5 billion 
on research and de- 
but 
were using less than 
10% of it in our own 
products,” said Jeff 
Weedman, vice pres- 
ident of global licens- 


velopment we 


ing and external ven- 
tures at Cincinnati- 
based P&G. 

The consumer 
goods giant, which 
holds 27,000 patents, 
has changed its intel- 
lectual-property philosophy 
dramatically. Now, all 
patents as well as other tech- 
available for li- 


its 


nologies are 


BILL HEISE at East- 
man Chemical uses 
the Net to find 
technology buyers 


censing, sale or joint ventures, 
Weedman said. 

So far, Yet2.com has signed 
up 56 members worldwide, in- 
cluding P&G, Toyota 
Motor Corp., Royal 
Dutch/Shell Group, 
Siemens AG and NEC 
Technologies Inc. 

Companies 
about $10,000 per 
year to post an un- 
limited number of of- 
ferings on the ex- 
change, according to 
Yet2.com CEO Chris 
DeBleser. After that, 
royalty fees on the 


pay 


sale of products in- 
corporating a technology or 
patent range from 0.5% to 
about 3%. The exchange col- 
lects a finder’s fee of 10% of the 


royalties. Some subscribers, in- 
cluding P&G, have also invest- 
ed in the exchange itself. 

P&G has not closed a deal in 
the four months it has been 
a member of the exchange, 
Weedman said, but it has been 
introduced to several potential 
buyers far afield of the con- 
sumer goods industry. 

One example is a contact- 
lens manufacturer interested in 
licensing a biodegradable en- 
zyme that P&G developed and 
uses in one of its flagship laun- 
dry products, Tide. As it turns 
out, the same enzyme that is ef- 
fective in removing oil from 
laundry may make an excellent 
nonabrasive lens cleaner. 


Slow Progress 

So far, Yet2.com has booked 
revenue of less than $1 million, 
according to DeBleser, partial- 
ly because it usually takes six 
months for a buyer to imple- 


Oilily Expects Payotf From System in One Year 


$2M project will cut 
apparel lead times 

BY MARC L. SONGINI 

A Dutch manufacturer and 


clothing retailer is preparing to 
install a $2 million supply- 


| chain system that’s expected to 


pay for itself within a year by 
cutting plant-floor lead times 


| and reducing other operational 


| grate 


bottlenecks. 

Olly’s BV, also known inter- 
nationally as Oilily, will be 
swapping homegrown 
Cobol software for a Win- 
dows- and Unix-based soft- 
ware package. The application 
will handle wholesaling, retail- 
ing, purchasing, stockpiling 
and other supply-chain-related 
activities, starting in April. 

The project reflects a trend 
among apparel makers to mi- 
away from stodgy, 
homegrown supply-chain ap- 
plications to packaged appli- 
cations that are geared more 
toward streamlining plant- 


out 


floor activities, said analysts. 
“The biggest weapon in 
fashion apparel is speed,” said 
Greg Girard, an analyst at 
AMR Research Inc. in Boston. 
Being able to handle different 
assortments and and 
moving products quickly is 
“absolutely critical,” he said 
Girard added that it wouldn't 
be unreasonable to see Oilily 
recover its $2 million invest- 
ment within 12 months. 
Providing the new software 
is New York-based Essentus 
Inc., which specializes in sup- 
ply-chain applications for the 
footwear and apparel indus- 
tries. Consulting fees in Eu- 
rope are generally lower than 
those in the U.S., contributing 
to the lower-than-usual 
for the implementation. 


sizes 


cost 


| Projected Gains 


The rollout at Alkmaar, 
Netherlands-based Oilily is 
slated to be completed by sum- 
mer 2002. “The gains will 
show not only in dollars but in 
customer loyalty, which you 


ie clipe aS Sap RsONr SND 


measure in 
money,” Willem Olst- 
hoorn, president and founder 
of the $100 million company. 

The system is expected to 
enable Oilily to manage its 
stock more efficiently; cut lead 
times for manufacturing by 
10% to 15%, reducing it to a 
couple of weeks; and deliver 
product faster than before. 

A distributor to 2,600 stores 
in 42 countries, Oilily has a 
far-flung supply-chain, manu- 


cannot directly 


said 


ment new technology and an 
additional six months for new 
products to hit the market and 
build royalties for the ex- 
change, he said. 

Bill Heise, director of licens- 
ing at Eastman Chemical Co. in 
Kingsport, Tenn., subscribes to 
The Patent & License Ex- 
change, which he browses reg- 
ularly for potential technology 
buyers outside of the chemical 
industry. 

Eastman owns about 1,500 
U.S. patents. “I view the Inter- 
net as a vehicle to find the right 
people to license this technol- 

| ogy,” Heise said. 

Eastman also uses propri- 
etary measuring tools on the 
Patent & License Exchange site 
to get a handle on the financial 
value of various technologies, 
patents and know-how in East- 
man’s portfolio of intellectual 
property. 

In addition to patented tech- 
nologies, GE’s Industrial Sys- 
tems Division also plans to sell 
innovative systems its IT peo- 
ple have created that the com- 
pany would never have thought 
to market otherwise, said Dave 
Christensen, manager of intel- 
lectual property at the business 
unit in Plainville, Conn. D 


facturing and distribution net- 
work, said Olsthoorn. 

The company buys fabrics 
from Italy, zippers from Japan 
and other materials from 
around the world. These com- 
ponents are shipped to the 
Netherlands, where they are 
forwarded to factories in Yu- 
goslavia for assembly. The fin- 
ished product goes back to the 
Netherlands for global distrib- 
| ution, illustrating just how in- 
tricate the company’s supply 
chain is, Olsthoorn said. 

It’s more expensive for ap- 
parel makers to build, evolve 
and maintain customer manu- 
facturing applications than it is 
for them to buy off-the-shelf 
| software, making their move to 
| packaged applications _ in- 
| evitable, said AMR’s Girard. 

Still, companies will need to 

custom-tailor any software 

they acquire, which typically 
inflates those costs by a mini- 
mum of 10%, he said. 

Girard noted that Liz Clai- 
borne Shoes, a Jacksonville, 
Fla.-based subsidiary of Liz 
Claiborne Inc., also recently 

| bought Essentus supply-chain 
modules to manage its manu- 

facturing activities. D 
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Only eTrust Can 
Protect You Like This. 
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of every IT 
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Security is the number one concern 
professional. The good news is that t 
proven solution 


Without Bullet-Proot Security, Successful 
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The only thing bigger than the opportunity that 
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all the risk that goes with it 

Undetected attacks can strike at 
from anywhere, in a sh of forms. Most sites 
can’t even track every attempt. And new 
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Without the right protection, 
losing everything: data, 
and more. 
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NEWS 


Banks Join Forces With Online Account Aggregators 


BY MARIA TROMBLY 
At this time last year, First Union Corp. 
was suing account aggregator Paytrust 


pass the bank’s Web site and access 
their accounts directly — possibly lead- 
ing to reliability or security problems. 


Inc. because Paytrust let customers by- Since then, the Charlotte, N.C-based 
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bank has dropped the case — and last 
week it became an aggregator itself, 
teaming up Redwood Shores, 
Calif.-based Yodlee.com Inc., a partner 
of Lawrenceville, N.J.-based Paytrust. 
Besides handling online bill payment, 
Paytrust was previously saving cus- 


with 


tomer passwords and logging into other 
banking and financial sites to give users 
access to their financial data from one 
site. Since then, the company has begun 
concentrating on bill payment and has 


| allied with Yodlee to aggregate account 


information for their joint customers. 
There has been an avalanche of deals 
combining such services during the 
past months, sparked by an agreement 
that allowed Citigroup Inc. customers 
to use Yodlee’s service to view all their 
accounts on one screen, including bank 
accounts, brokerage accounts, frequent- 
flier miles, credit cards and even e-mail. 
The information can be viewed through 
either Yodlee’s home page or at a pri- 
vate-label site like those that exist with 
brand-name firms such as Boston’s 
FleetBoston Financial Corp. and New 


York’s Chase Manhattan Corp. 


What About Wireless? 


The total number of account aggre- 
gation users should top 3 million by 
2003, according to Christine Barry, an 
analyst at Newton, Mass.-based Meridi- 


| en Research Inc. Yodlee and Atlanta’s 


S1 Corp. are the leading vendors so far 
(see chart). 

Yodlee also offers wireless access to 
accounts. Clients such as Dulles, Va.- 
based America Online Inc., New York- 
based Morgan Stanley Dean Witter & 
Co. and Salem, Mass.-based Salem Five 
Cents Savings Bank have already begun 
offering the service to their retail cus- 
tomers. 

Analysts are divided as to whether 
financial institutions or portals will 
dominate the account aggregation space. 
But it’s already clear that it won't be 
start-ups like Yodlee that win the battle 
for consumer eyeballs. 

“Financial institutions definitely have 
the advantage — they’re already trusted 
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Aggregators 


= AOL 

= Morgan Stanley Dean Witter 

= Salem Five Cents Savings Bank 
= Citigroup 

= FleetBoston Financial 

= Chase Manhattan 


eg 


= Yahoo 

= Wells Fargo 

= Centura Banks 

= Motley Fool 

siVillage 

= SmartMoney.com 

= OnMoney.com 

# YirtualBank 

= Women’s Financial Network 


= Fiserv Inc. 


by consumers for their financial needs,” 
said Barry. “But the portals are present- 
ing themselves as unbiased third par- 
ties who aren't going to cross-sell.” 

Some account aggregators argue that 
there isn’t yet even a call for wireless 
access. “Wireless is not just one of the 
things that comes up as a No. 1 require- 
ment,” said Roger Berman, CEO of San 
Ramon, Calif.-based financial account 
aggregator eBalance Inc., which spe- 
cializes in analysis tools for individual 
investors and the financial institutions 
that serve them. 

“How much can you really see on a 
two-inch screen?” said Jaime Punishill, 
an analyst at Cambridge, Mass.-based 
Forrester Research Inc. He estimated 
that account aggregation as a whole 
will take at least three to five years to 
achieve critical mass, mostly because of 
privacy, security and complexity issues. 

“It still requires too much effort and 
too much of a leap of faith on the cus- 
tomer’s part,” he said. D 


| 


Wireless Ads Really Do Matter 


A wireless advertising study in which users received a total of more than 100,000 
messages, including ads, in return for free text messaging showed the following: 


60% of the participants said they liked receiving ads targeted 
o to personal profiles they completed. 


20% sought more information about the products being 
O advertised after seeing the messages. 


Base: 5.000 users in Sweden. 
Study sponsor: LM Ericsson Telephone Co., Stockholm 





INTRODUCING THE E-BUSINESS server 


os" NAINFRAME 


Our goal: create the ideal server for 
big e-business. A server so tough it 
would stand up to the heaviest loads. 
So rock-solid reliable you could be open 
for e-business round-the-clock. In short, 
a server with the best qualities of a 
mainframe. Result? The Unisys e-@ction 
Enterprise Server ES7000. 

But while it’s a lot like heavy metal, our 
ES7000 is light years ahead of anything 
else out there. It allows workloads to 


1a 


be partitioned over 32 
Intel® Pentium” Ill Xeon 
processors. And it can 
run both Microsoft 
Windows” 2000 and 
UNIX at the same time 
The Unisys e-@ction 
Enterprise Server ES7000. The kind of 
mainframe-class e-business server 
you'd expect from the people who 
invented the mainframe in the first place 
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Gy Cals for Delay 
in Cybercrime Treaty 


The Global Internet Project (GIP), 

a U.S.-based business group that’s 
trying to head off government regu- 
lation of the Internet, last week 

called for more dialogue on a pro- 
posed international treaty on cyber- 
crime issues. Members of the group 
urged the Council of Europe to delay 
its self-imposed deadline of next 
month for completing work on the 
cybercrime treaty. The Council, 

which has 41 member countries, 
released a draft of the treaty last 
month, and the U.S. and other na- 
tions outside of Europe are widely 
expected adopt the final version. 

But John Patrick, vice president of 
Internet technology at IBM and the 
GIP’s chairman, said the proposed 
treaty could hamper efforts to stop 
cybercrime. “It’s an issue where if | 
we move too quickly to ban the 

tools used by hackers, we may also | 
ban the tools used by investigators,” 
Patrick said. 
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ISPs Get nana 
Pricing for Servers 


IBM and Mercantec Inc. in Naper- 
ville, Ill, announced an agreement 
last week to offer usage-based 
pricing options for Internet service 
providers that host e-commerce 
applications for their customers. 
For an “initiation” fee, Internet 
service providers will get as many 
servers as they need but will be 
billed only for the number of com- 
merce storefronts actually used 
by their customers. The pricing 
model eliminates the up-front cost 
involved in buying servers for host- 
ing e-commerce applications, the 
companies said. 


EERIE RL WAVES Asem ATENEO 


Short Takes 


A federal judge has ruled that 
MICROSOFT CORP. has to pay 
$3.73 million in attorneys’ fees and 
other legal costs to BRISTOL TECH 
NOLOGY INC. in Danbury, Conn., in 
addition to the $1 million in punitive 
damages it already owes in its an- 
titrust case. . .. DELL COMPUTER 
CORP. matched analysts’ expecta- 
tions by announcing that it closed 
its third quarter ended Oct. 28 with 
revenue of $8.26 billion, compared 
with $6.78 billion for the same 
quarter last year. 


| Comdex this y: 
| (ASP) summit 


| based 
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SP Summit Grabs | 
Comdex Spotlight 


Providers seek converts to hosted model 


| BY MICHAEL MEEHAN 


r’S ABOUT the services, 


stupid. 


At least that will be a 


message coming from a | 


significant portion of 
this week’s Comdex/Fall 2000 
show in Las Vegas. 

Known as a products show, 
-ar will host an 
application service provider 
for their Web- 

and 


make the case 
software 
delivery model. 

“(Comdex is] starting 
move toward more of 
vices show,” 


baum, an analyst at 


|} ware 


Amy Mizouras, an analyst at 
International Data 
Mass., 


Corp. in 


Framingham, said she 


believes that commitment has | 


helped validate the ASP busi 


ness and that customers are 


starting to perceive that soft 


will be delivered as a 


service over the Internet in the 


where ASPs will 
services | 


to | 
a ser- | 
said Larry Buchs- 

Boston- 


based research and consulting | 


firm The Yankee Group. 

The ASP model gained a sig- 
| nificant this 
when Microsoft Corp. an- 


boost 


| nounced its 


software 
ternet. 


Ee | 


‘In Broadband 


summer | 


.Net strategy, in | 
| which it plans to make all of its | 
available over the In- | 


future. 


Yet it’s a long way to “best 
at the largest technol- 


the 


in show” 


ogy conference of 


generate much buzz. 

“The real test will be 
conversation 
week on how 
show was,” 


we have 
successful the 
she said. 

Buchsbaum 


noted that 


| Comdex comes at a shaky time } 
pre- | 
| dicted the ASP model will ulti- 


in the ASP industry. He 
mately succeed, but that many 
of the current players won't 
survive to see that triumph. 


“It’s clear there’s just a lot of | 


Wireless at Comdex an Evolution 


Comdex/Fall 2000 showgoers will 
see evolutionary rather than revolu- 
tionary wireless and handheld 
products this week in Las Vegas, 
according to analysts and vendors. 

Though Bluetooth personal-area 
networking technology - designed 
to use the airwaves to hook printers 
to laptops, for example - had the 
buzz a year ago with products 
expected by the end of this year, 
vendors will still be exhibiting de- 
vices you can only look at rather 
than buy 

“Bluetooth has a way to go, 
so you'll still be seeing a lot of 
prototypes at Comdex and you'll be 
seeing some interesting chip tech- 
nology,” said Tim Scannell, a Quin- 
cy, Mass.-based analyst ai Mobile 
Insights Inc. 

Arvind Sabaharwal, director of 
telecommunications and networks 
at General Motors Corp. in Detroit. 
agreed, saying he doesn't antici- 
pate seeing Bluetooth products - 
which GM plans to use to connect 
devices in its assembly plants - for 
another 18 months. 





In the handheld device arena, 
Santa Clara, Calif.-based Palm Inc. 
plans to unveil new wireless devel- 
opments at Comdex, as well as 
provide a “sneak-peek” at a new 
Palm portal, according to a compa- 
ny spokeswoman. 

Compaq Computer Co., which 
has developed its iPAQ line of 
handhelds based on Palm’s rival, 
the Pocket PC platform from Mi- 
crosoft, plans to introduce its 
handheld wireless strategy at the 
show, a spokeswoman said 

Scannell said he doesn't expect 
to see “anything significant from 
Palm” at Comdex but he does 
expect Microsoft and its Pocket PC 
partners to use the show to “move 
aggressively” against Palm in the 
marketplace. 

Wireless LANs operating on the 
widely adopted 802.11B standard 
have reached a level of maturity 
not seen in other wireless products 
at Comdex. Elliott Hamilton, an 
analyst at Strategis Group in Wash- 
ington, said potential buyers will 
see reduced prices. 


| tomers at 
Mizouras said she expects the | 
a fair | 
number of vendor pitches for | 
| pete with the excitement level 
| of acamera mounted on some- 


year. | 
Mizouras said ASP events at | 
previous shows have failed to | 

| hardware, networking and se- 
the | 
next | 


| buy,” 





confusion as to what an ASP is | 
value of an 


and what’s the 
ASP,” 

David Dobrin, 
electronic-business 


firm 


he said. 


Surgency Inc. in Cam- 


an analyst at | 
strategy | 


bridge, Mass., said part of the | 


ASPs putting on the 
like 


value of 


ritz for a show 


| was to gain converts to their | 


religion. “Maybe they’re trying 
to recruit people to become 


ASPs,” he said. 


Of course, ASPs are also cus- | 


and | 


a certain level, 


services crowd to hear 


curity software companies. 
“People want to know how 
much stuff are they going to 
she said. “You can be sure 
there’ll be plenty of prospect- 
ing going on.” 
Comdex has 


always been 


| known as an event where hard- 


ware vendors show off their 
latest and greatest to small and 


| medium-size customers. 


Mizouras said she wondered 


“Costs are definitely getting 
cheaper for wireless LANs,” 
Hamilton said. “We're seeing a lot 
of [Internet service providers] and 
resellers entering the market.” 

Though mature and backed by 
industry heavyweights, including 
Lucent Technologies Inc. in Murray 
Hill, N.J., and Cisco Systems Inc. 
in San Jose, the 802.11b standard 
faces a battle for the 2.4-GHz 
frequency band from the standard 
backed by the HomeRF Working 


collection of companies that in- 
cludes Intel Corp. in Santa Clara, 
Calif., Motorola Inc. in Schaum- 
berg, Ill., and Compaq. 

This year's Comdex will be the 
first, highly visible skirmish between 
the two camps, according to 
Scannell. Because the two groups 
advocate the use of different tech- 
nologies to spread signals across 
the spectrum, Scannell said both 
plan to use Comdex to launch 
“strong campaigns” for their poten- 
tially conflicting technologies. B 

- Bob Brewin 


amend 


Comdex | 


j 
i 
j 
j 
j 
| 
| 
i 
| 
Group, an equally high-powered i] 
| 
i 
i 
| 
| 
| 
| 
| 
i 
| 
| 
i 
| 
| 
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i — 
With a Sm 


Here’s what will le offered at 
the Comdex ASP summit: 

® Four keynote speeches, including 
one on redefining the role of the 
ASP for large enterprises by Aubrey 
Chernick, chairman and CEO of 
Candle Corp. 


= A two-day set of sessions devoted | 
to the ASP business model and 

place in the market, including 

revenue models. 


= A two-track session on ASP tech- 
nology, including how to construct 
an ASP data center and how to 
manage security in a hosted 
environment. 


if business applications will 
stand out amid all the glitz and 
glitter of the rest of the show. “I 
don’t know that they can com- 


one’s shoe and that kind of 
techie stuff,” she said. 

The ASP summit runs 
Wednesday and Thursday. B 


Best Buy to 
Offer Choice 


BY DAN VERTON 
Best Buy Co. last week said it 
plans to offer broadband Inter- 
net services from several lead- 
ing vendors at more than 400 
retail locations. 

The Eden Prairie, Minn.- 
based company plans to instal 
interactive displays at its retail 
locations to let consumers com- 
pare high-speed Internet ser- 
vices from a half-dozen pro- 
viders. Although other major 
retailers, such as Richmond, 
Va.-based Circuit City Stores 
already offer broadband 
Internet access services, the 
Best Buy announcement signals 
the full-fledged entry of broad- 
band technologies into the re- 
tail sector, say analysts. Best 
Buy will get a percentage of all 
sales at its retail outlets. 

“This is a good shot in the 
arm for broadband, and some- 
thing that the market needed,” 
said Jack DaQuano, a senior 
analyst at Hurwitz Group Inc. 
in Framingham, Mass. D 


Inc., 





Don’t let your 
e-commerce deployment 
adeiaall a sci-fi 


rilier. 





Find out about the best strategies and solutions 
to build your business. 


WebSolutionsWorld.com 


Visit www.websolutionsworld.com to be prepared for anything and 
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NEWS 


Lack of Funding Forces More Online Retailers to Shut Down 


Furniture.com, MotherNature.com among many unable to hold on 


BY LINDA ROSENCRANCE 


Three more electronic busi- 


nesses were unplugged last 
week, joining the ranks of oth 


er online retailing failures. 


Furniture.com Inc., Pets.com | 


MotherNature.com 
Inc. disclosed week that 
they were discontinuing oper- 
ations due to fiscal troubles. 

Furniture- 


Inc. and 


last 


In a statement, 
.com said it was having “diffi- 
culty securing sufficient capi- 
tal to fund operations going 
forward.” 

The Framingham, 
based online seller of furniture 


and other home furnishings | 


said it was shutting down its 
site and looking to sell off its 
assets, though company offi- 
couldn’t be reached to 
timetable 


cials 
comment on a 
those plans. 
Furniture.com’s 
ment than 


came less 


months after online rival Liv- | 
ing.com Inc. in Austin, Texas, 


closed its virtual doors after 


running out of money. 


A spokeswoman for the ven- | 


ture capital unit of CMGI Inc. 


in Andover, Mass., which has a | 
seat on Furniture.com’s board | 


of directors, said the online re- 


tailer suffered from a problem | 


that has befallen many other 


e-commerce start-ups: poor 
back-office and product-distri- 


bution systems. 


Business Plans Crucial 


Analysts say that many on 


line retailers have paid too | 
much attention to marketing | 
and not enough to developing | 


solid business plans. 
David Cooperstein, an ana- 


lyst at Forrester Research Inc. | 
said | 
many of the failed companies | 
didn’t bother to establish solid | 


in Cambridge, Mass., 


supply chains, reliable 


tomer service and financially | 


sound business practices. 
longer 
ridiculous 


“Investors no 
giving companies 


ar? 


amounts of money so they can | 


blow it on marketing,” he said. 
Online that are 
expected to succeed will be 
those with solid business plans 
behind their flashy Web fronts 
said Harry Wolhandler, an ana- 
lyst at ActivMedia Research 
LLC in Peterborough, N.H. 


retailers 


Mass.- | 


for 


announce- | 
three | 


cus- | 


“(These companies] have to | 
attend to their [back-end] op- 
erations” and satisfy their cus- | 
tomers with solid service and | 
reliable shipping — regardless 
of what niche they may oper- 
ate in, Wolhandler said. 

San Francisco-based 
com said it plans to shut down 


Pets.- | 


its online pet-supply store and 


sell off its assets, including its 
well-known talking sock pup 


pet. The company said it had | 


been unsuccessful in obtaining 
new capital or finding a buyer. 
Concord, Mass.-based Moth- 
erNature.com, another compa- 
ny backed in part by CMGI, an- 


nounced that it, too, was shut- 
ting down due to a lack of 
funding, less than one year af- 
ter going public. 
MotherNature.com isn’t the 
only online seller of vitamins 
and health care products that 
has faced financial hardship. 
Last month, Drugstore.com 
Inc. in Bellevue, Wash., said it 
plans to lay off 10% of its ap- 
proximately 600 employees in 
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the wake of a net loss of $33.3 
million for the third quarter. 
Meanwhile, Eve.com Inc. in 
San Francisco also announced 
plans to shut its virtual doors 
after it was unable to sell cos- 
metics profitably online. 

And two weeks ago, More.- 


| com Inc. in San Francisco said 


it planned to sell most of its as- 


| sets to HealthCentral.com in 


Emeryville, Calif. D 


Reporters Jennifer DiSabatino 


| and Michael Meehan contri- 


buted to this article. 


Alpha Licensee Adds 
Power to Processor Line 


Space-saving design among developments 
endorsing longevity of Compaq technology 


BY JAIKUMAR VIJAYAN 
HE RECENT 
of activity around 
Compaq Comput- 
er Corp.'s Alpha 
processor 

nology continues. 

Last 


nology, boosted its product | 


lineup with a_ high-density 
server and a faster, more pow- 
erful chip. 

Concord, Mass.-based API is 
funded by Samsung Electron- 
ics Co. in Seoul, South Korea, 


and is a supplier of Alpha chips | 


to Compaq. 


The company was formed a | 


few years ago mainly to market 
and promote Alpha technolo- 


gy. It uses Samsung’s manufac- | 


turing facilities to build a line 


of Alpha processors that in- | 
cludes the recent 64-bit, 750- 


flurry | 


tech- | 


week, API NetWorks | 
Inc., a licensee of Alpha tech- | 





MHz Alpha 21264 chips. 


Sleek Features 


API’s new CS20 server, an- | 


nounced last week, is a dual- 
processor system featuring a 


slim size designed to 


space while offering all the | 


performance benefits of a full- 
size server, according to the 
company. 

Linux Networx Inc., a Sandy, 
Utah-based builder of high- 
performance Alpha servers, 
will use the new systems to 


save 





build clustered Linux-based 


Alpha configurations, — said 
Clark Roundy, a vice president 
at Linux Networx. 

A lot of the applications be- 
ing targeted by Linux Networx 
require servers that can sup- 
port a large number of proces- 
sors, Roundy said. The new 
API server will allow Linux 
Networx to pack more proces- 
sors into its systems without 
increasing their size, he said. 

“A lot of our customers have 
got limited floor space,” 
Roundy said. It’s the reason 
why “one of the biggest advan- 


About API 
NetWorks 


= Markets Alpha processors 


= Funded by Samsung Electronics 


| m Focused on making systems for high- 
| performance Linux-based Alpha servers 


= Earned $130 million in revenue last year 
tages is the density of the new 
servers,” he added. 

API’s announcement last 
week builds on other recent 
Alpha-related developments. 

Earlier this year, IBM an- 
nounced that it would fabri- 
cate next-generation copper- 
based Alpha chips. 

And more recently, Stock- 





holm-based LM Ericsson Tele- 
phone Co. announced a $500 
million partnership with Com- 


| paq under which it will base its 


next-generation switching 
technologies on Compaq’s Al- 
pha processors and Tru64 
Unix operating system. 

The Ericsson deal gives 
Compaq a “resounding en- 
dorsement for the performance 
and longevity of Alpha,” said 
editor Terry Shannon in a re- 
cent edition of “Shannon 
Knows Compag,” an Ashland, 
Mass.-based newsletter. 

The deal, in conjunction with 
IBM’s new fabrication role and 
Alpha’s continuing gains in the 
high-performance market, in- 
dicates that Alpha servers are 
onaroll, he added. D 


VeriSign Testing Multilingual Domain Names 


BY TODD R. WEISS 

The company that maintains 
the master database of Internet 
domain names planned to start 
testing the use of multilingual 
Web site names late last week, 
initially supporting Chinese, 
Japanese and Korean charac- 
ters in addition to the English 
ones now in use. 

Support will soon follow for 
testing domain names that use 
languages such as Spanish, 
Portuguese and Arabic. Veri- 
Sign Global Registry Services 
(GRS), which manages the 
back-end piece of the domain- 
name registration process, has 


| the 
| around 
| GRS is a unit of VeriSign Inc. in 





said the Multilingual Domain 
Names Testbed is an important 
step in finding ways to open 
Internet to more 
the world. VeriSign 


Mountain View, Calif. 

However, VeriSign GRS said 
last month in an announce- 
ment detailing the test-bed 
plans that the ultimate disposi- 
tion of multilingual names reg- 
istered during the test period is 
dependent upon the outcome 
of a standards process being 
carried out by the Internet En- 
gineering Task Force (IETF). 

In addition, the Internet So- 


users | 


ciety, a Reston, Va.-based non- 
profit group that acts as the 
“organization home” for the 
IETF and the Internet Archi- 
tecture Board, released a state- 
ment last week urging a more 
cautious approach for the use 
of non-English characters in 
domain-name registrations. 
The Internet Society, which 
provides insurance services 
and other assistance to the 
IETF but is an entirely sepa- 
rate organization, said it sup- 
ports the “good intentions” of 
opening the domain-name sys- 
tem to a wider number of in- 
ternational users. D 
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Luminant Worldwide 
Plans to Layoff 175 


After failing to meet revenue 
expectations, Web consulting firm 
Luminant Worldwide Corp. in Dallas 
announced it will lz 
workforce, or abo 5 employees 
reducing the total number of work 

to 775. The company said it was 
aiso restructuring ifs busines 
reach profitability. Luminant's rev 
enue for the third quarter was $38 
million, a decline of 5% from the 
second quarter 

Other Internet consulting firms, 
including Chicago-based Xpedior 
Inc., Atlanta-based iXL Enterprises 
and Boston-based Viant Corp., have 
also had lower-than-expected third 
quarter earnings, due in part to the 
curtailed electronic-business spend 


ing by cash-strapped dot-coms 


IBM Announces 
WebSphere for Linux 


IBM last week announced a version 
of its WebSphere e-commerce 

a pplication to run on the 

)perating system. IBM said 
the new Linux version of the soft 
ware will available from the four 
major distributors of Linux: Caldera 
Systems Inc., Red Hat Inc., SuSE 
AG and TurboLinux Inc 


Transmeta IPO Comes 
Amid Chip Evaluation 


Microprocessor designer Transmeta 
Corp. launched its highly anticipated 
13 million-share initial public offer 
ing (IPQ) on the Nasdaq Stock 
Market last week, with shares 
closing at twice the initial price 
But questions about the perfor- 
mance of Transmeta’s low-power 
Crusoe chip - and hesitation on the 
part of some big U.S.-based com 
puter makers to use the chip - con 
tinue to haunt the San Francisco 
based chip maker 

Transmeta’s Crusoe microproces 
sors are designed for performance 


at low power, prolonging battery life 


in mobile computers. The chips are 
x86 processor-compatible, which 
allows them to accept applications 
designed for Intel Corp. processors. 
Earlier this month, IBM backed out 
of tentative plans to use Trans- 
meta’s chips in its ThinkPad 240 
notebooks 


BY DAN VERT 


‘Wacky’ Caching Features 


nascent 91; users complain about pricing 


The Oxford 
Chronicles 


The HMO has seen many 
IT ups and downs 


LATE 1996 Oxford rolls 
out new claims processing 
and membership manage 
ment applications, kicking 
off a string of costly billing 
and claims errors 


NOVEMBER 1997 Ox 
ford announces its first-ever 
quarterly loss: $78M 


MID-1999 Major systems 
fixes are done. Claims back 
log cut from 1.5M to 400,000 


APRIL 2000 Oxford 


managers announce they 
will study whether and how 
much to outsource IT 


NOV. 6, 2000 Anesti- 
mated $270M to $330M deal 
with CSC is announced 
internally 


ser Skepticism Cited 
In Oracle Stock Dip 


Analysts predict some are holding off on 


Nixed Outsourcing at First 


() 


r the applications 

But outsourcing now that 
major systems fixes are donc 
ind the company is back on 
track financially is “like a kick 
in the teeth,” said a source in 
Oxford’s IT department, who 
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Mildly Volatile 


Oracle stock on Nov. 9: 
26 7/8 24 1/16 


4615/32 1131/32 


All | Got Was a T-shirt 


Nov 


another 
source 
new projects v 
1 the evaluation 
y simple and clas 
inability to 
aid 
lo help retain staff while ex 
ploring its options, Oxford 
promised bonuses to IT staffers 
potentially affected by a deal, 
payable 45 days after a decision 
was reached. However, some 
viewed the gesture as too little 
As one in-the-trenches IT vet 
eran put it, “They all seem to 
think that people are fat, dumb 
and happy, but we're not.” D 





Luminant Worldwide 
Plans to Layoff 175 


After failing to meet revenue 
expectations, Web consulting firm 
Luminant Worldwide Corp. in Dallas 
announced it will lay off 18% of its 
workforce, or about 175 employees, 
reducing the total number of work- 
ers to 775. The company said it was 
also restructuring its business to 
reach profitability. Luminant’s rev- 
enue for the third quarter was $38 
million, a decline of 5% from the 
second quarter. 

Other Internet consulting firms, 
including Chicago-based Xpedior 
Inc., Atlanta-based iXL Enterprises 
and Boston-based Viant Corp., have 
also had lower-than-expected third- 
quarter earnings, due in part to the 
curtailed electronic-business spend- 
ing by cash-strapped dot-coms. 


IBM Announces — 
WebSphere for Linux 


IBM last week announced a version 
of its WebSphere e-commerce 
software application to run on the 
Linux operating system. IBM said 
the new Linux version of the soft- 
ware will be available from the four 
major distributors of Linux: Caldera 
Systems Inc., Red Hat Inc., SuSE 
AG and TurboLinux Inc. 


See 


Transmeta IPO Comes 
Amid Chip Evaluation 


Microprocessor designer Transmeta 
Corp. launched its highly anticipated 
13 million-share initial public offer- 
ing (IPO) on the Nasdaq Stock 
Market last week, with shares 
closing at twice the initial price. 
But questions about the perfor- 
mance of Transmeta’s low-power 
Crusoe chip - and hesitation on the 
part of some big U.S.-based com- 
puter makers to use the chip - con- 
tinue to haunt the San Francisco- 
based chip maker. 

Transmeta’s Crusoe microproces- 
sors are designed for performance 
at low power, projonging battery life 
in mobile computers. The chips are 
x86 processor-compatible, which 
allows them to accept applications 
designed for Intel Corp. processors. 
Earlier this month, IBM backed out 
of tentative plans to use Trans- 
meta’s chips in its ThinkPad 240 | 
notebooks. 


NEWS 


User Skepticism Cited 
In Oracle Stock Dip 


Analysts predict some are holding off on 
nascent 9i; users complain about pricing 


BY DAN VERTON 


ONCERNS about 
the pace of future 
sales of its busi- 
ness applications 
put a damper on 
Oracle Corp.'s stock last week, 
about 


raising new questions 


the company’s transition to 
application services and the 
recent departure of former 
President Ray Lane 

Analysts blame the stock’s 
mild volatility it slipped 1 
at 24 13/16 by last 
- in part on con- 
taking a 


wait-and-see approach to the 


3/4 to close 
Wednesday 
cerns that users are 
company’s new business appli- 
cation suite 

ecent re 
Applica 


tion Server suite and its claims 


Despite Oracle’s 
lease of its Oracle9 
that it has saved $1 billion in 
expenses by using its own soft 
ware, analysts acknowledge 
that the new software is still in 


its infancy and say some users 


may want to wait until all of 


the bugs are worked out before 
they install it 


‘Wacky’ Caching Features 
“We have been 

since [Oracle9i 

Server] came out in June that 


on record 


Application 


it is a 1.0 product that won't 
be really done until sometime 
next year at the earliest and 
that in this version, it has some 
real flaws,” said Mike Gilpin, 
an analyst at Giga Information 
in 
Mass. Among those problems 


Group Inc. Cambridge, 
are some “wacky” caching fea 
tures, he said. 

Oracle couldn’t be reached 
for comment. 

Doug Cummings, an Oracle 
user and manager of new tech- 
nologies at Vicor Corp. in An- 
dover, Mass., said the stock slip 
is likely the result of many 
things, including recent user 
dissatisfaction with the com- 
pany’s capacity-based pricing. 

“Customer dissatisfaction at 
a bad pricing model and appli- 
cation issues and rumor are all 
affecting the stock price,” said 
Cummings. “I think the trend 


will continue long after the 
rumors die.” 

Michael Karaman, vice pres 
ident and chief technology 
officer for product develop- 
at The Medstat Group 
Ann Arbor, Mich., 
said high-tech stocks 


have been dropping in value 


ment 
in 
many 


Inc 


during the past several weeks. 
Karaman added that although 
his clients will likely upgrade, 


Continued from page 1 


Oxford 


Tuesday, she said. She declined 
to comment on Oxford’s inten 
tion to farm out other aspects 
of IT. CIO Art Gonzalez didn’t 
return calls seeking more de 
tails by press time. 

However, other sources said 
the plan also includes data cen- 
ter operations, network opera- 
tions, telecommunications and 
server support. That would af 
fect most of Oxford’s 440 IT 
workers. Application develop 


The Oxford 
Chronicles 


The HMO has seen many 
IT ups and downs: 


LATE 1996 Oxford rolls 
out new claims processing 
and membership manage- 

ment applications, kicking 
off a string of costly billing 
and claims errors 


NOVEMBER 1997 Ox- 
ford announces its first-ever 
quarterly loss: $78M 


MiD-19899 Major systems 
fixes are done. Claims back- | 
log cut from 1.5M to 400,000 | 


| 

| 

| APRIL 2000 Oxford 

| managers announce they 
| will study whether and how 
| much to outsource IT 

| NOV. 6, 2000 An esti- 
| mated $270M to $330M deal 
| with CSC is announced 


internally 
ad 


| 


| 
| 
| 
| 


many continue to complain 
about pricing. “To my knowl- 
edge, [Oracle has ] not made 
any concessions to date,” he 
said. 

Carl Olofson, an analyst at 
International Data in 


Framingham, Mass., said Ora- 


Corp. 


cle application sales were 


very good during the quarter 
ended Aug. 31, but users may 
be reluctant to convert to the 
new applications because they 
are packaged differently from 
the prior versions. 

Carl Zetie, another analyst at 
Giga, said it isn’t clear whether 


ment will likely remain in- 
house, though CSC is rumored 
to be in the running to provide 
help there. 

Oxford would be one of the 
first major HMOs to outsource 
so extensively, which will like- 
ly spark similar deals in the 
next year, said Mark Anderson, 
an analyst at Meta Group Inc 
in Stamford, Conn. 

“(IT ] is not the core compe- 
of and 
they’re starting to realize that,” 


tency most insurers, 
Anderson said. 

Oxford’s IT group has been 
on aroller coaster since a diffi- 
cult migration in 1996 to a new 
set applica- 
tions to manage membership 
and process claims. That soft- 
ware miscalculated payments, 
and 


of homegrown 


underestimated costs 
overestimated income by $392 
million. As a result, Oxford 
posted its first-ever quarterly 
loss — $78 million — in No- 
vember 1997. The state of New 
York also fined the company 
$3 million for breaking insur- 
ance laws [News, Oct. 30]. 


Nixed Outsourcing at First 
Oxford out 
sourcing at the time. But then- 
new senior managers who 
were hired to stabilize the 
HMO ultimately the 
idea. They figured that Ox- 
ford’s own IT staff knew best 
how to repair the applications. 

But outsourcing now that 
major systems fixes are done 
and the company is back on 
track financially is “like a kick 
in the teeth,” said a source in 
Oxford’s IT department, who 


considered 


nixed 
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Oracle stock on Nov. 9: 
LOW 


24 1/16 


52-WEEK LOW 


11 31/32 


HIGH 


26 7/8 


52-WEEK HIGH 


46 15/32 


the conservative sales forecast 
is due to concerns about the 
application server or the indi- 
vidual “If the 
latter, it is certainly true that 
there is unhappiness among 


applications. 


[application] users both over 
product ... and over relations 
with Oracle,” he said. 

“The only surprise is how 
long it has taken most people 
[in] the market to realize just 
how much Oracle misses Ray 
Lane,” Zetie said. D 


asked to remain anonymous. 

During the turbulence after 
the new systems went live and 
malfunctioned, many IT peo- 
ple worked overtime — un- 
asked and uncompensated, he 
said. The outsourcing 
agreement has “been upsetting. 
There is nobody out there who 
is happy about this,” he said. 


All | Got Was a T-shirt 


In a meeting Nov. 6 with the 
IT staff, senior executives said 
all IT people will be offered 


new 


jobs under the CSC deal, but 
no offers have been made yet. 
IT staffers got T-shirts, mouse 
pads and employee handbooks 
from CSC. 

El Segundo, Calif.-based 
CSC confirmed talks with Ox- 
ford but didn’t give specifics. 
“There is no signed agreement 
yet,” a spokesman said. 

What has been particularly 
frustrating is the uncertainty 
during the past several months 
about whether internal IT staff 
would have jobs, another Ox- 
ford internal IT source said. 
And work on new projects was 
tabled during the evaluation. 

“It’s a pretty simple and clas- 

| sical case of the inability to 
| manage and control IT,” he said. 
| To help retain staff while ex- 
ploring its options, Oxford 
promised bonuses to IT staffers 
potentially affected by a deal, 
| payable 45 days after a decision 
| was reached. However, some 

viewed the gesture as too little. 
As one in-the-trenches IT vet- 


| 
| 


eran put it, “They all seem to 
think that people are fat, dumb 
and happy, but we’re not.” D 





Never before has 8U made such 
an impact on network availability 


APC's NEW Symmetra® RM; the first N+1 rack-mountable Power Array™ 
with all the reliability of Symmetra’s patented redundancy and scalability. 


To ensure the highest availability for your 
business, you rely on a network built on 
redundant, scalable and “always on” 
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servers, routers, switches and storage. Pine 


Shouldn’t your power protection strategy 
be just as redundant, reliable and scalable? 


APC introduces Symmetra RM, the first 
rack-mountable Power Array with N+1 
redundancy. Symmetra RM fits into a 
standard 19” rack, is scalable up to 6kVA 
of power capacity and has an integrated 
Web/SNMP Management Card for remote 
monitoring over the network. 


Symmetra RM is compatible with APC’s 
multiple management accessories, like the 
MasterSwitch”™ family for remote rebooting 
or the Environmental Monitoring Card for 
temperature and humidity monitoring. 


Increase the redundancy of your 
network with Symmetra RM today. 
Contact APC and let APC’s Legendary 


Reliability” work for you. <> 
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COMPATIBLE 


The Symmetra RM fits into any standard 19” 

# enclosure and takes only 8U of space. Its 
power modules are hot-swappable, so you 
can scale them up without any downtime 
Symmetra RM is also easily manageable with 
the industry-leading network platforms. 


© Scalable power and runtime with 
additional 2 kVA modules which can be 
added up to 6 kVA of power capacity 
(with an extra module for redundancy). 


e User-friendly LCD & LED display for local 
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ADP Upgrade Glitch Causes 
Online ‘Trading Problems 


Customers unable to receive confirmation | 
of trades; analysts call incident ‘a fluke’ | 


BY TODD R. WEISS 
ROBLEMS 
routine upgrade of 
mainframe software 
at Automatic Data 

Inc. 


WITH A 


Processing 

(ADP) caused a system crash 
on Nov. 3 that temporarily left 
customers of at least five bro 
kerages unable to get real-time 
updates of key information 
such as the cost of the online 
stock trades they were making. 
Officials at Roseland, N_J.- 
based ADP, which claims its 
brokerage services business 
processes 25% of the online 
stock trades in North America, 
last week confirmed that tech- 
nical problems with one of the 
company’s computers disrupt- 


ed the transaction-matching | 


system it uses to track incom- 
ing buy and sell orders. 

Two New York-based bro- 
kerages, Quick & Reilly Inc. 
and TD Waterhouse 
Inc., said they were affected by 
the system crash. ADP spokes- 
Arlene said 


woman Driscoll 


five brokerage firms took the | 


company up on its offer to help 
update trading records during 
the weekend of Nov. 4. 
However, Driscoll refused to 
specify the number of financial 
services firms that were affect- 
ed by the problems or even 
to say how many brokerage 
ADP She also 


clients has. 


| declined to release specific de- 


tails about the cause of the sys- 
tem crash, beyond saying that 
it occurred while workers at 


Coke's Net Links 87 Countries 


Equant crafts global 
internetwork design 


BY JAMES COPE 


The Coca-Cola Co. last week 


confirmed that it had complet- | 


ed the design of a new network 


that will link its 289 facilities in | 


87 countries. 

Equant NV in Amsterdam 
created the soft-drink compa- 
ny’s internetworking plan, said 
Claude Marais, strategic rela- 
tions manager at Atlanta-based 
Coca-Cola. Eventually, all of the 
company’s site-to-site network 
traffic will run over Equant’s 
global frame-relay backbone, 
and the network will be man- 
aged by the vendor as well, 


Marais said. The total cost of 


the project is expected to be 
$47 million over the next five 
years, he added. 

The decision to create a new 
internetwork came about in 
large part from Coca-Cola’s 
ongoing deployment of enter- 
prise resource planning soft- 
ware from Munich, Germany- 





based SAP AG, Marais said. 
According to Jim Slaby, an 
analyst at Giga Information 
Group Inc. in Cambridge, 
Mass., SAP deployments re- 
quire a consistently robust net- 


work because of “some defi- 


nite latency tendencies.’ 
Marais said Coca-Cola had 
been working with several ser- 


vice providers but decided to | 


move to a single outsourcer 


COCA-COLA'S $47 million global 
network will link 289 plants 


Group | 


| 
| 
| 
| 
| 
| 
| 
| 
| 
| 


| 
| 
| 
| 





ADP were installing a “main- 
frame-based software upgrade.” 

ADP immediately contacted 
its clients about the problem 
the so-called 


and _ repaired 


| order-match system after the 
stock markets closed on Nov. 3, | 


Driscoll said. The 
then offered to help all affected 
clients update their records, 
she said. 

ADP didn’t the 
names of the five brokerages 
that asked for assistance. 


company 


disclose 


Glitches Happen 


Customers of the brokerages 


were still able to make trades | 


while the transaction-match- 
ing system was down, but they 
couldn’t receive immediate 
confirmation of the cost of 
their trades. Quick & Reilly 
said its customers were also 
unable to get confirmation that 


their trades were being made, | 


To Revamp 


forcing the company to manu- 


that could build, manage and 
guarantee quality of service on 
a single network. But Marais 
was unable to identify the cur- 
rent providers, and he declined 
to discuss details of the ser- 
vice-level agreement that Coca- 
Cola has with Equant. 

“As your applications and 
organization grow, you out- 
grow your network,” he said. 
“We ... liked [Equant’s] capa- 
bility to manage holistically 
around the world.” 

Marais said he also likes that 
“100% of the backbone is 
owned and operated by 


Equant.” Most other carriers | 
have several sets of alliances | 
that collectively provide all of | 


the optical links, he explained. 

Slaby said no other back- 
bone provider has a more ex- 
tensive global 
than Equant. The 
movement toward 
services, which speed network 
throughput by classifying and 
prioritizing traffic according to 
its urgency, was likely a factor 
in Coca-Cola’s decision to have 
Equant manage the network. 

Marais said Equant is ex- 
pected to create the network 
backbone during the next four 
months. D 


infrastructure | 
company’s | 
tiered IP | 





ally issue notices to that effect. 


| Larry Tabb, an analyst at | 
| TowerGroup in 


Mass., called the incident “a 


fluke” and said he hadn’t heard | 


of many similar technical prob- 
lems at ADP. 

“ADP has a pretty good track 
record,” Tabb said. Such glitch- 
es are typical during upgrades, 
he added, because complete 


testing and performance mod- | 
eling is “virtually impossible” 


because of the massive amounts 
of information involved. 
Rob Sterling, an analyst at 


Jupiter Communications Inc. | 


in New York, said he agreed. 
“Technical glitches do hap- 
pen,” Sterling said.» 


Office Depot 


Call Centers 


BY MARC L. SONGINI 
Facing a dismal fourth quarter, 
Office Depot Inc. is moving to 
consolidate and improve its 
call centers — an 
that’s slated to include a 
$22 million investment in new 
technology. 

The office products supplier 
last week announced that the 
sales performance of its North 
American retail division “con- 
tinued to 
Office Depot CEO Bruce Nel- 


son said the company will also | 


consolidate 24 call centers 
into seven and upgrade its 
customer service organization. 
But an Office Depot spokes- 
woman said the two an- 
nouncements aren’t related. 


CRM Overhaul Also Planned 
Nelson blamed Office De- 
pot’s poor performance on 
weak sales of desktops and 
other computer-related equip- 
ment, as well as on higher 
warehouse costs. 
The Delray 


Beach, Fila.- 


based company also plans a | 


$28 million retooling of its cus- 


tomer relationship manage- | 


Needham, | 





initiative | 


trend downward.” | 
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Is Ita Fluke? 


A routine upgrade of main- 
frame software caused 
headaches for online traders 
working with brokerages that 
use ADP for back-office 
transaction processing: 


® At least five brokerage 
houses were affected when 
an ADP order-matching sys- | 
tem wouldn’t allow online 
stock-trade customers to 
confirm trade prices and, in 
some cases, to receive con- 
firmation of transactions. 


= The failure began on the 
morning of Nov. 3 and con- 
tinued until after the close 
of the stock markets that 
day, forcing ADP to divert 
trade traffic to a backup 
system. 

= ADP wouldn’t release 
information on the number 
of brokerages or individual 
customers affected. 


ment infrastructure, Nelson 
said. Office Depot will invest 
$22 million in a computer tele- 
phony system that it said will 
improve call center efficiency 
without raising the cost of 
operations. 

The revamp will be built 
around application modules 
from Methuen, Mass.-based 
Genesys Software Systems 
Inc., according to Office Depot 
officials. Munich, Germany- 
based Siemens AG’s Informa- 
tion and Communications Net- 
works will handle the systems 
integration work involved in 
the project. 

When completed, the sys- 
tem will combine telephone, 
e-mail and Web site data into 
one centrally accessible call 
center. Currently, Office De- 
pot’s users can get service 
through several call centers 
built on a mixed IBM AS/400 
and mainframe environment. 

The existing browser-based 
user interface will be retained 
to access customer data, said 
Ken Jackowitz, vice president 
of business systems at Office 
Depot. The company also 
plans to use a cobrowsing 
capability that will allow per- 
sonnel to take over a Web 
customer’s session and direct 
him to appropriate locations 
on the Office Depot Web site 
for assistance. 

The migration is scheduled 
to start in March and is due to 
be completed in August. D 
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Instant Messag 


ing 


Use Expected to Jump 


Corporate penetration to skyrocket 
from 7% to 70% this year, IDC says 


BY JENNIFER DiISABATINO 

YSTS and ven- 

dors have been 

promoting instant 

messag (IM) 

and real-time col- 

laboration as powerful tools for 

a couple of years, but corpora 

tions haven’t raced to adopt 

them. Yet one research firm ex 

pects that usage to quadruple 

during the next year in light of 

the fact that more e-mail prod- 

ucts have embedded the tech- 

nology and that some employ- 

ees are using free Web-based 
software on their own. 

An International Data Corp. 
(IDC) study conducted earlier 
this year predicts that about 
70% of large corporations will 
install IM software during the 
months chart). 
That represents a big leap over 


next 12 (see 
the 6.9% using it today, accord- 
ing to the study of 72 corpo- 
rations with more than 1,000 
employees 

“IM will carve out a func- 
tional niche in the corporate 
world, and it will grow at a 
strong rate,” the report said. 


In addition, it noted that IM 
will be much more popular in 
industries such as transporta- 
tion and retail/wholesale, in 
which 99% of respondents said 
they were likely or extremely 
likely to use it. In contrast, 60% 
of government respondents 
said they aren't likely to use it. 

A mixed picture emerged 
when information technology 
managers were queried about 
whether they use IM as a col- 
laborative tool inside the cor- 
poration. In recent interviews, 
IT managers’ reactions ranged 
from blank stares and surprise 
to enthusiastic affirmations 
that real-time collaboration is 
a mission-critical tool. 


Ubiquitous for Some 

Belinda Henry, 
group administrator at Corning 
Cable Systems in Hickory, N.C., 


messaging 


said teams of use 
Sametime, a real-time collab- 


oration software product with 


engineers 


embedded messaging from Lo- 
tus Development Corp. The 
call centers use it for customer 
support. 


Sametime has become so 
ubiquitous and such an effec- 
tive tool that Corning Cable 
Systems needed to install ma 
chine translation software for 
its foreign workers, she said. 
That way, messages are trans- 
lated automatically as they are 
sent around the globe. 

“We have a lot of 
right now who are collaborat- 
ing with German folks in our 
German sites, as well as using 
Spanish translation” for their 


groups 


months for customer service 
on the help desk and in sales 
sections of dealerships’ sites. 
The software will automatical- 
ly route messages to an avail- 
able operator. 

“We want to communicate 
with customers in the way that 
customers want to communi- 
cate with us,” Rouse said, and if 
that means using IM, then he 
will get it for them. 


Security, Privacy Concerns 
Other users, however, have 
been much cautious. 
IT managers at Credit Suisse 
First Boston Corp. in Zurich, 
R.R. Donnelley and Sons Co. 
in Downers Grove, Ill., and 
Emery Worldwide in Palo Alto, 
Calif., all said they don’t use 


more 


PERCENTAGE LIKELY OR 


OF COMPANIES SOMEWHAT LIKELY TO 


sites in Puerto Rico, Henry 
said. The translation software 
is from Transparent Language 
Inc. in Merrimack, N.H. 
Michael 
manager of customer relation- 


Rouse, corporate 
ship management at Toyota 
Motor Sales USA Inc. in Tor- 
rance, Calif., said his company 
will roll out IM in the next few 


IM. Al Petras, director of IT at 
R.R. Donnelley, said there has 
been no demand. 

Dean Richardson, a senior 
systems analyst at The Boeing 
Co. in Seattle, said his com- 
pany is considering installing 
IM software but must first 
overcome fears about security 
and abuse of the service with 
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too much personal chat. 

“I think that the adoption 
rate overall is creeping up 
rapidly, but the sanctioned rate 
is [not],” said Dana Gardner, 
research director at Aberdeen 
Group Inc. in Boston. 

Michele Rubenstein, chair- 
woman of the board of direc- 
tors at the Electronic Messag- 
ing Association in Arlington, 

fa., agreed. 

“The adoption rate is com- 
ing from the bottom up, as 
opposed to the top down,” said 
Rubenstein, 
security strategist at TidePoint 
Corp. in Baltimore. 

Analysts said there is actu- 
ally little security risk in using 
IM. Even products that are 
publicly available, like Ameri- 
ca Online Inc.’s Instant Mes- 
senger (AIM) and Microsoft 
Corp.’s MSN IM, are as secure 
as any e-mail program, accord- 
ing to analysts. 

Privacy is the real security 
concern, they said. 

“Privacy has long been a 
thorn for IM,” the IDC report 
said. “IM messages have been 
entirely Web-based, and 
tential corporate users have no 
control over message routing 
and no ability to define poli- 
cies and secure standards for 


who is also a 


po- 


messaging delivery.” 


Stiff Competition 

There are other hurdles. 
One is a lack of standards. AIM 
and MSN IM users can’t chat 
with each other. AOL won't 
open its member lists to com- 
peting platforms for security 
reasons, the company says. 

Microsoft, AT&T Corp. and a 
number of smaller companies 
that offer IM products have 
petitioned the Internet Engi- 
neering Task Force to endorse 
an open standard through the 
advocacy group IMUnified. 

Smaller companies fighting 
for a foothold in the IM mar- 
ket include iCast Corp.; Tribal 
Voice, a subsidiary of CMGion 
Inc.; Jabber.com Inc., a sub- 
sidiary of Webb Interactive 
Services Inc.; and Bantu Inc. 

In addition, the dominant 
corporate messaging and col- 
laboration companies are 
adding IM capabilities to their 
packages. Besides Lotus’ Same- 
time, IM is now available in 
Microsoft Exchange 2000. 

Now that those are available, 
said David Ferris, director of 
research at Ferris Research 
Inc. in San Francisco, “it’ll take 
off with a vengeance.” D 
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Supercomputer Testing Standards Ready for Improvement | 


BY JENNIFER DISABATINO | 

The High-Performance Com- | 

puting (HPC) User Forum is scientific, engineering and gov- 
supercomputer | ernment users. 


testing standards that it says ; Addressing the SC2000 su- | 
will serve as a valuable tool for | percomputing conference in 

| Dallas last week, officials from | 

establishing | the HPC User Forum reported | 


progress on a plan to create bet- 
ter performance tests for the 
most powerful class of comput- 
ers. The forum represents lead- 
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ing supercomputer users. 

Forum officials said im- 
proved tests are needed to ad- 
vance scientific research, in- 
dustrial engineering and clas- 
sified government work, all of 
which rely heavily on super- 
computers. The forum is orga- 
nized by International Data 
Corp. (IDC) in Framingham, 
M 

sts need to measure not 

only the speed of the process- 
ing and the amount of data 
processed, but also the agility 
that supercomputers demon- 
strate in processing data from 
variable sources, said Joyce 
Tompsett Becknell, director of 
the compute platforms and ar- 
chitectures group at Aberdeen 
Group Inc. in Boston. 


Testing With Care 


“Testing, in general, only 
demonstrates that you’re very 
good at manipulating a test,” 
Becknell said. “You have to be 
very careful what you get out 
of benchmarks.” 

For example, Becknell said, in 
last week’s presidential elec- 
tion, the wait for results may 
have made Wall Street antsy, 
which in turn would have put a 
tremendous burden on _ the 
high-end systems processing 
transactions for financial insti- 
tutions. Those requests come in 
from various points over the In- 
ternet at different times; tradi- 
tionally, supercomputers have 
handled batch data from set 
points at set times, she said. 

“If you look at what’s going 
on with high-end computers, 
we're increasingly trying to 
use them in the Web universe,” 
Becknell said. “It doesn’t mean 
that [existing tests are] decep- 
tive; they’re better than noth- 
ing. At the same time, what 
users use computers for is not 
what they’re tested for. Look 
for tests that do loads [similar 
to what] you're going to do.” 

Although existing testing 
mechanisms “are nearly mez 
ingless beyond chest-thum 
ing publicity, in the absence of 
anything better, they continue 
to be emph -d in many pro- 
curements,” said Debra Gold- 
farb, IDC group vice president 
for worldwide systems and 
servers. 

Robert Lucas, head of HPC 
research at the U.S. Department 
of Energy’s National Energy 
Research Computing Center at 
the Lawrence Berkeley Nation- 
al Laboratory in Berkeley, Calif., 
is leading the team that’s devel- 
oping a new benchmark suite. D 
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Cisco Beats Wall 
Street Projections 


Cisco Systems Inc. beat Wall Street 
projections when it announced 
quarterly earnings last week. For its 
fiscal 2001 first quarter, which end- 
ed Oct. 28, the San Jose-based net- 
work equipment company reported 
$1.36 billion in net income, corn- 
pared with $814 million for the 
same period a year ago. Revenue 
rose to $6.52 billion from $3.92 bil- 
lion last year. 


Sendmail, IBM Team 
For Linux Messaging 


Emeryville, Calif.-based Sendmail 
Inc. and IBM announced that they 
will jointly develop, market and dis- 
tribute Internet mail routing and 
hosting software that runs on IBM's 
Linux-enabled eServer family and 
software. The collaboration will en- 
sure that e-mail moving from one 
platform, such as Lotus Notes, to 
another platform, such as Microsoft 
Exchange, doesn’t overwhelm the 
server on the incoming side, said 
officials at both companies. 


L&H Co-founders Quit 


NV (L&H) announced last week that 
co-founders Jo Lernout and Pol 
Hauspie have stepped down from 
their positions as co-chairmen and 
managing directors. The executive 
changes are “steps towards resolv- 
ing recent controversies affecting 
the company and to maintain its 
leadership position in the emerging 
speech and language technology 
markets,” said the Belgian speech- 
recognition software developer. The 
Securities and Exchange Commis- 
sion is investigating L&H’s business 
and accounting practices. 


MICROSOFT CORP. announced a 
relationship with Hong Kong-based 
SMARTONE MOBILE COMMUNICA- 
TIONS LTD. to offer customers mes- 
saging and personal information 
that is available across multiple de- 
vices. ... YAHOO INC. in Santa 
Clara, Calif., has agreed to acquire 
Taiwan's leading portal provider, 
KIMO.COM, in a stock-swap deal 
valued at $146 million. 


_ NEWS!\\ 
Wigmam Inprise to Change Its 


| Struggling vendor also acquires company 
to launch collaborative developer platform 


| BY LEE COPELAND 


TRUGGLING tools ven- | 
dor Inprise Corp. 
plans to return to its | 
roots and change its | 
name back to Borland. 
After accumulating big loss- | 
es in revenue and market share 
as Borland International Corp., 


| the Scotts Valley, Calif., com- | 
| pany switched its name to In- | 
| prise in 1998. But it was under | 


the Inprise name that the com- 


| pany aborted a failed merger | 


| with Corel Corp. last May. 


| name 


Inprise will assume its old | 
next quarter, officials 
said last week. 
The 
nounced 


company also an- 
acquisition to 


jump-start its new developer | 


an 


service provider (DSP) busi- | 


ness unit. The DSP group will 


| develop a collaborative soft- 
ware development platform to | 


link developers in disparate lo- 
cations. 

Inprise acquired 
Inc., a Chicago-based develop- 
ment shop, in an all-stock deal 
Terms weren’t disclosed 

Analysts _ said 
is welcome but 


tools news, 


they noted that the market for | 
| such services is small. 


Inprise must “get the indus- 


try to see them as innovative | 
| and having the flair and re- 
sources to invest in new ideas,” | 
| said Yasim Natis, an analyst at 


Gartner Group Inc. in Stam- 


‘Microsoft Aims to Connect 


‘Suppliers, B2B 


Lernout & Hauspie Speech Products | 
| BY CAROL SLIWA 


| 
Microsoft Corp. last week | 


| launched an E-Business Accel- | 
| eration strategy designed to 


| 
: ed 
help suppliers connect to busi- | 
ness-to-business marketplaces | 
from four major vendors. | 
Many suppliers have been | 

| 


| hesitant to link to electronic 
| marketplaces for a variety of 


| reasons, including fears that 


| 


| 
| 
| 
| 
| 


Microsoft’s E-Business 
Acceleration initiative 


What it is: An umbrella term for a 
set of products, services and partner 
programs to help companies 
connect to B2B marketplaces. 


Key software: Supplier Accelera- 
tor, which includes adapter code to 
help suppliers link to marketplaces 
from Ariba, Commerce One, Clarus 
and VerticalNet. Using it requires 
Microsoft's BizTalk Server, Com- 
merce Server and SQL Server. 


When it’s due: First quarter, 2001. 


| Commerce Server 
| Server database in order to use 





Marketplaces 


| exchanges will provide a fo- | 
rum for buyers to comparison | 


shop based solely on price. 
Microsoft is trying to ad- 

dress the technology barriers 

with Supplier Accelerator soft- 


| ware, which includes adapter | 
code that will work with its ex- | 


isting products to connect to 
marketplaces powered by 


| servers from Ariba Inc., Com- 
| merce One Inc., Clarus Corp. | 


Faster Hookup 


| Microsoft’s 
| (which does business docu- | 
| ment routing, data transforma- | 


and VerticalNet Inc. 


A supplier must be using | 


BizTalk 


Server 


tion and tracking) plus its 


Supplier Accelerator, which is 
due next quarter. Pricing infor- 
mation wasn’t available. 

“This is a step in the right di- 
rection, but it’s no more than a 
step,” said Andrew Bartels, an 


| analyst at Cambridge, Mass.- 
| based Giga Information Group 


Inc. “It probably is most mean- 
ingful for small companies, 


| ments 
| building applications with de- | 
| velopers spread around the | 
| world ... but it’s a small group 


Bedouin | 


providing | 
Web-based access to Inprise’s | 


and SQL | 








| ford, Conn. “Large IT depart- 


are struggling with 


of people that have this prob- 
lem,” Natis added. 


Using Bedouin’s Web-based 


application development prod- 
uct, Inprise expects to launch 
the Borland DSP platform in 


January. The first release of the | 


service will offer Web-based 


| access to Inprise’s Java, C++ 
; and Delphi development envi- 


ronments as well as source- 
code management capabilities. 

Using Borland DSP, a com- 
pany could track the progress 


of an application development | 
| project outsourced to develop- 


ers 
joint code-development pro- 


ject, said Ted Shelton, senior | 
| vice president of business de- | 


| velopment at Inprise. | happened,” said Kirzner. D 


particularly small manufactur- | 
| ers and wholesalers, who have 
| tended to be good customers 
| for Microsoft because Micro- 


soft’s Commerce Server has 


| been priced at a level for them.” 
Larger companies, however, | 
tend to have more customized, | 


Unix-based systems, and even 
midsize companies do some 
customization work, Bartels 
noted. “If they’ve already stabi- 
lized on the Microsoft plat- 
form, [Supplier Accelerator] 
will help,” Bartels said. “If they 
haven't, it’s probably not a 
compelling reason to move.” 
Small companies don’t have 


Changes Due 
For Lucent 


BY JAMES COPE 
Lucent Technologies Inc. last 


week said it is restructuring its | 


top management in a push to 
integrate its sales and service 
organizations and may cut 240 
jobs. 

The announcement came 
amid rumors of even steeper 
layoffs and as the company be- 


| Framingham, 





in India or coordinate a | 
| buy the tools to design, create 





| place former Chairman 
| CEO Richard McGinn. 
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| Online 


Name Back to Borland 


Developments 


Software companies that have 


| launched collaborative devel- 
| opment environments: 


LAST WEEK: Inprise and Bedouin software 
LAST MONTH: Rational Software Corp 
and Vignette Corp 


| TWO MONTHS AGO: Merant PLC and 


Intel Online Services 


Borland DSP will be avail- 
able as a server and hosted of- 
fering. Pricing has yet to be de- 
termined. 

Rikki Kirzner, an analyst at 
International Data Corp. in 
Mass., said a 
number of tools vendors have 


| recently sought partnerships 


or acquisitions to expand the 
Web-based collaborative capa- 
bilities of their tool sets (see 
box above). 

“Most companies don’t want 
to go to multiple vendors to 


and mange code and content, 
which is essentially what has 


many choices these days. 


Mitch Kramer, an analyst at 
Boston-based Patricia Seybold 


| 4 
Group, said IBM announced a 
| similar product to help cus- 


tomers integrate to market- 
places created through Ariba 
and i2 Technologies Inc. 
Microsoft went a step fur- 
ther than IBM, providing 
adapters to more vendors. But 
Microsoft’s product doesn’t 
provide adapters to market- 
places running on i2 and Ora- 
cle Corp., though a Microsoft 
spokesman said it does provide 
documentation for users to 


| build their own links. D 


gan a search for someone to re- 
and 


Among various shifts in re- 
sponsibility, Lucent’s executive 
vice president and chief finan- 


| cial officer, Deborah Hopkins, 


45, will lead development of a 
new information systems in- 
frastructure. 

“Linking our finance organi- 
zation and our CIO organiza- 
tion will better enable us to 
uniformly redesign our key 


| processes and systems,” said 


acting Lucent Chairman and 
CEO Henry Schacht. D 
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for voice and data. 
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NEWS 


Comdex addiction 


HIS WEEK, I’ve joined a projected 220,000 other techno- 
junkies for our annual Comdex fix in Las Vegas. I am not 
proud of this addiction. I’d like to kick the habit. But 
there’s no 12-step program to save me. 

I had high hopes, so to speak, that the Web would res- 


cue me and others from the craving 
to spend hours getting jostled along 
crammed aisles, eating wretched 

food, enduring the city’s banal glitz 
and searching anxiously to find that 
one cool product that justifies it all. 

The Web was supposed to virtual- 
ize trade shows, especially mon- 
strous ones like Comdex, making 
them quaint relics of the PC age. 
Che promise of the Web was that I 
could use my laptop and point and 
click my way to product information 
and software demonstrations — even down- 
loading a product and testing it without the ca- 
cophonous distractions inside the Las Vegas 
Convention Center. 

The Web failed me. That’s because judging 
technology and services without evaluating the 
people behind them is doing only half your due 
diligence. And Comdex is the one place in the 
U.S. where you can run almost any high-tecl 
product through its paces while looking its de 
veloper or VP of sales in the eye when she tells 
you, “Oh, we’ll fix that in the next release.” 
Right. Where’s that next booth? 

So, here I am, looking for hot technology 


(5 (T Too LATE 
TO GP PACK To 
We SELF- 


REGULATION Exit 7 


MARK HALL is Computer- 
world’s West Coast 
editor. You can contact 
him at mark_hall@ 
computerworld.com. 


products and cool new trends that 
will change the way we work, play, 
maybe even think. That’s what I’ve 
seen at some past Comdexes. 

One positive new trend is in the 
way software gets distributed, as 
reporter Michael Meehan relates in 
this week’s news pages. ASPs are 
here for good, if Comdex is an ac- 
curate barometer. This year, 70-plus 
companies will be demonstrating 
their services at the concurrent 
ASP Summit. 

On the other hand, I’ve arrived in Las Vegas 
already downcast about wireless. I was expect- 
ing Bluetooth products to be drawing crowds 
to vendor booths. But Bob Brewin reports in 
this week’s issue that that probably won't be 
the case. Seems the technology has hit some 
serious potholes on the road to deployment. 

True technojunkies, however, are undaunted 
in the face of technology setbacks. We can al- 
ways find something at Comdex to give us a 
rush. Something that we can get from our deal- 
ers once we get back home. In the meantime, 
I'll put off those Comdex withdrawal pains for 


another year. D 


DOT? 


Is that Microsoft’s 
final answer? 


EGIS: STEVE BALLMER from Red- 

mond, Wash., is the CEO of Mi- 

crosoft. Behind him, cheering him 
on, is his Uncle Fester. Hi, Uncle Fester! 
OK, Steve, are you ready? 
Ballmer: I’m ready, Regis! Let’s do it! 
Regis: Then let’s play Who Wants to Be 
Taken Seriously? OK, Steve, here we go: 

If your company bills it- 

self as a provider of se- 
cure, reliable networking 
software, and your inter- 
nal network suffers an em- 
barrassing, potentially dis- 
astrous hacker attack, 
what do you do? A. Give 
confusing, conflicting ac- 
counts of the attack; B. 
Provide truthful, consis- DON TENNANT is assistant 
tent information about it; news editor at | 
C. Blame it all on Depart 
ment of Justice intrusive- 
ness; D. Ignore it all and 
talk really loudly about something else. 
Ballmer: Well, let me see. My gut tells me the an- 
swer is D — that seems to be the most logical. But 


Computerworld. Contact 
him at don_tennant@ 


gee, I’m not sure. This is a tough one. 
Regis: You know you have your three lifelines, 
Steve — 50/50, you can ask the audience or you 
can phone a friend. 
Ballmer: I think I'll phone a friend, Regis. I’m go- 
ing to call Bill. He’s an old college buddy. 
Regis: Well, let’s get Bill on the line. Bill? This is 
Regis from Who Wants to Be Taken Seriously? 
Your friend Steve needs your help. 
Bill: Finally! 
Ballmer: Ha-ha! Bill, if your company bills itself as 
a provider of secure, reliable networking soft- 
ware, and your internal network suffers an em- 
barrassing, potentially disastrous hacker attack, 
what do you do? A. Give confusing, conflicting ac- 
counts of the attack; B. Provide truthful, consis- 
tent information about it; C. Blame it all on De- 
partment of Justice intrusiveness; D. Ignore it all 
and talk really loudly about something else. 
Bill: C, blame it on DOJ intrusiveness. 
Ballmer: Are you sure, Bill? What if it happens to 
us and we need the FBI to help? 
Bill: We have really smart people. We'd never have 
to ask... (Buzz!) 
Regis: Oh, I’m sorry, Steve, time’s up. Well, your 
friend seemed fairly certain. What do you think? 
Ballmer: This is so hard, Regis! I’m going to have 
| to ask the audience. I brought along the entire 
| Microsoft public relations department, and they 
| should know. 
| Regis: OK, audience, key in your answers now. 
(Pause.) Wow! That’s the first time that’s ever 
happened! Every single member of the audience 
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Executive Insights 0 
Content Security: 


Proactively Addressing Potential 
Liabilities in the New Economy 


uring the first half of this year, a number of high profile incidents were featured in the 
media which detailed malicious intruders sabotaging Web sites. Widely recognized 
names such as eBay, Amazon.com and E*Trade experienced significant downtime 
costing millions of dollars in lost revenue. Because of these incidents, security has 


become a major concern for every top-level executive whose business is 
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However, information security Is not limited to e-commerce. It is also P 
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increasingly dependent on e-commerce. 


relevant to all Internet activities including e-mail and Web browsing. As 
more businesses provide Internet access to employees, content security and the potential lia- 
bilities surrounding unrestricted access are being discussed in executive boardrooms. 


| B . Fx : F > technologies also expose companies to ¢ 
ssues business cxecutives race alm of liabilities and vulnerabilities 

g technologies and the Internet are designed to In a recent study conducted by the American Manage 
usinesses to be more productive and efficient. [ ment Association (AMA), 64% of employees, on ave 

is Of business commu have access to e-mail. E-mail penetration has saturated 

ause it is ver the enterprise mar while opportunity for growth still 

requires a computer with a simple exists in the small to medium sized business markets 

| program and Internet connection : net Wit mail access literally at their fingertips, employees 

has proven to be an evolutionary tool to gather competi can correspond with friends and family aside from con- 

tive market information, prospect for sales leads, attract ducting their regular business activities. Of course, 

new customers, build stronger relationships with existing employees can also receive e-mail from any source 


customers and suppliers and develop new distribution thro the Internet 
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Allan Carey is senior analyst and Richard Dean is pro 
gram manager for Framingham, Mass.-based Interna 
tional Data Corp.'s Information Security Services 
research program. For more information on Content 
Security, see IDC’s white paper, Content Security: Pol 


icy-Based Information Protection and Data Integrity. 


m Class and individual action suits 

= Loss of network integrity and availability 
# Loss of intellectual capital 

a Loss of employee productivity 


= Defamation of brand name and reputation 


a cor 


a 





e employees were 


1 software were only 


as m 


MIS Case, unton 


++} smn! 


itial liabilities and pre 


PRODUCED BY COMPUTERWORLD CUSTOM PUBLISHING 


CASE STUDY: ZENITH ELECTRONICS CORP. 


Content Technologies MiMEsweeper 
Keeps E-mail Clean at Zenith 


The hottest growth area in the fieid of Internet se- 
curity is content security, with expected compound 
annual growth of 71% from 1999 to 2004, according 


to Framingham, Mass.-based research firm Int 
tional Data Corporation (IDC). Content security rev 
enues were only $66 million in 1999 


expects that number to reach a 


Just think of the people 
who got hit hard with 
the Melissa virus, or any 
of the new ones that 
came out. We don’t have 
to worry because 
MiMEsweeper catches 
new viruses even if we 
haven't updated the 
virus definitions. 


The Critical Need 


The reason for this fast growth 
content security addresses a criti 
cal need in virtually every compa- 
ny connected to the Internet — a 
need that only recently was wide 
ly recognized. Viruses, pornog 
phy, oversized files or banned file 
types, spam and malicious Java 
code are innocently downloaded sil eal 
from a Web site — there are lots 1 aiaaaaa 
of dangers lurking out there in cy 
berspace — dangers that can 
bring down networks, spur harassment lawsuits, a 
degrade productivity of both people and systems 
Employees can unknowingly or deliberately send 
trade secrets to a competitor with the click of a 
mouse. Content security products protect companies 
from these dangers by scanning content and stop- 
ping suspect e-mail or W nloads before tl 
do damage. 


Of course, some companies have been wise for 
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years to the content dangers posed by the Internet. 
Zenith Electronics Corporation is a case in point. A 
developer and user of technology since its founding 
in 1918, the Glenview, IIl.-based company had 1999 
sales of $834 million. Over four years ago, Zenith 
was one of the first companies to install Content 
Technologies MIMEsweeper 

when it was first introduced. 
MIMEsweeper scans all e- 
mails coming into or out of the 
organization through a dedicated 
Microsoft Windows NT box. Once 
through the gateway, e-mail is 
sent to the local network in Glen- 
view or over leased lines to other 
locations. Any e-mail that vio- 
lates policies set by Zenith is au- 
tomatically blocked. Depending 


on the violation, the e-mail may 


>-mail administrator, 


be discarded, bounced back to 


lics Corp 


the sender or held for further 

analysis by the IT staff 
“! can't remember the last time we had a virus in 
here. MIMEsweeper looks for things like Java script 
HTML viruses, Visual Basic stuff, .exe files — all the 
things that can attac an e-mail. Usually, it can 
clean the e-mail for me — it will actually go in and 
blow up the attachment long enough to clean the 
virus, wrap the attachment back into the message, 
and send it on its way,” says Jeff Ferrera, Zenith’s e- 


mail administrator 





The Greatest Benefit 
MIMEsweeper’s greatest benefit is peace of mind. 
‘Just think of all the people who got hit hard with 
the Melissa virus,” says Ferrera. “Or any of the new 
ones that have come out. We didn't have to worry 
because MIMEsweeper catches new viruses even if 
we haven't updated the virus definitions, which | 
probably don't do as often as | should. Every now 
and then I'll walk in the office in the morning and 
someone will say 'Oh, did you hear about suc 
such new virus that's going around?’ and I'm think- 
ing in my head that there is probably a new virus def- 
inition | should have downloaded. Then | will go to 


the [Windows NT] box and find that MIMEsweeper is 


already catching the infected messages,” he says. 


Virus Updates 


Not that updating the virus definitions is all that diffi- 


cult, Ferrera says. Rather than reinvent the wheel, 
MIMEsweeper works with the anti-virus detection 
product an IT organization may have already in- 
stalled, invoking that product to detect and cleanse a 
specific virus when it thinks one is present. Zenith, 
for example, uses the Command Software (Jupiter, 
Florida) Virus Scanner for MIMEsweeper. “To update 
the virus definitions all | need to do is download them 
from the Command Software Web site,” Ferrera says. 

But Zenith doesn't take any chances when it 
comes to attachments. “If an e-mail comes in here 
with an attachment containing, say, a Visual Basic 
script that it doesn't recognize, MIMEsweeper has 
instructions to hold the message until I've looked at 
it,” Ferrera says. “Typically what I'll do is check out 
the message to see if it looks okay before releasing it 


to the intended receiver.” 


Greater Control over E-mail 
Ferrera also likes MIMEsweeper because of the con- 
trol it gives Zenith over its e-mail traffic in general. 


For example, it can detect who's sending or receiving 


the most ch allows better resource de- 
ployment and load balancing. MIMEsweeper 


helps Zenith to accurately and quickly diagnose t 


eeper for scanning ou 


’ states Ferrera. “I can think of one case ir 
e had an employee lea 
g his ex-Zenith colleagues to join him 
at his new place of employment. So we 
om that sender 
e need, the system can also be used to 
ent for a particular phrase to pro- 
of trade secre r to block peor le 
from sending or receiving e-mail to or from specific 


addresses 


More Than a Sense of Security 


MIMEsweeper can also help users with issues other 
than security related topics 
I 
‘Actually, someone came to me today — they 


e-mail had been lost. | was able to 


' ' 
9 files and see that, yes, the e-mail had 


come in bu ad been mis-addressed,” he says 
MIMEsweeper had not only held the mail, it had 
sent a mes > to the sender notifying them of the 
error 
“| would consider MIMEsweeper to be a 'must- 
have' for any organization,” Ferrera says, “if only to 


protect yourself. | think the product is invaluable.” 
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said the answer is A — You should give confus- 
ing, conflicting accounts of the attack. 

Ballmer: That’s good enough for me, Regis. I’m go- 
ing to go with my PR team. I’m going to say A — 
give confusing, conflicting accounts of the attack. 
Regis: So, that is your. ... 

Ballmer: That’s my final answer. 

Regis: (Dramatic pause.) I’m sorry. The correct 
answer is B. You should provide truthful, consis- 
tent information. 

Ballmer: Darn! I knew the answer was “Ignore it 
all and talk really loudly about something else!” 
should have gone with my gut! D 


ALLAN E. Al 


Open-source 
opens up dialogue 
on leadership 


ANAGEMENT. LEADERSHIP. 

The words sound absolute; they 

have the feel of marble pillars. 
But can the principles of management 
shift? Can the concept of leadership shift 
and evolve? Could it be that there are 
new ways to succeed as a leader? The an- 
swer to these questions is yes, and the 
»vidence for it lies within the IT world 
— or more specifically, within the open- 
source software movement. 

Recently, several researchers— M. Lynne 

Markus at the City University of Hong Kong, 
Brook Manville at Saba Software and the late Car- 


TER 


ole E. Agres — examined how the open-source 
movement actually manages to create software 
(“What Makes a Virtual Organization Work?” 
MIT Sloan Management 
Review, Fall 2000). The 
people who have created 
Linux or belonged to 
Netscape’s Mozilla.org 
don’t function like normal 
organizations. They were, 
and are, groups of volun- 
teers. They aren’t man- 
aged by bosses who con- 
trol salaries and bonuses. 
There’s no way they could 
have been led by conven- 


ALLAN E. ALTER, a former 
editor at Computerworld, | 
is editor-in-chief of the 
MIT Sloan Management 
Review. Contact him at 
alter@mit.edu. 
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tional means. And yet, 
somehow, they created 
some of the most important software in use today. 
Given the many opportunities that IT profes- 
sionals have today, how the open-source move- 
ment functions can offer insights into leading con- 
ventional organizations that are volunteer in reali- 
ty, if not in name. The researchers’ findings sug- 
gest new questions and possibilities for managing 
and leading, or ways that, if not necessarily new, 
can be more strongly emphasized than in the past: 
Motivate by enhancing the reputation of the people who 


work for you. Public praise and providing opportu- 
nities are things good managers do already. But 
the open-source movement provides something 
else, too: the opportunity for wide visibility 
among your professional peers. Among the main 
reasons developers participate in an open-source 
project are the chance to be listed as contributors, 
the opportunity to interact with a wide group of 
people (even if by e-mail and postings) and the 
hope that many others will see the quality of their 
work. Could this be a way to attract the best peo- 
ple — both permanent and temporary staff — to 
your organization? 

Lead within a stable core, not a stable organization. 
While open-source projects consist mostly of vol- 
unteers who can come and go at will, each project 
has a strong core of committed people who have a 
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vide a different and effective approach to leader- 
ship? Should sustaining the core be the main pri- 
ority of a company’s human resource efforts and 
compensation policies? 
Don’t assign staff to a project; have them earn member- 
ship. While anyone can contribute a fix or identify 
a bug, the authors noted, taking on a more respon- 
sible role in an open-source project often requires 
going through some kind of acceptance process. 
For example, Apache volunteers achieve mem- 
bership — and the voting rights it provides — 
only after a probationary work period, followed 
by a consensus vote of the “core.” Could this 
model be applied to a “center of excellence” with- 
in an IT organization? Could members perform 
such functions as evaluating, developing, promot 
ing and reprimanding staff? 


major hand in governing it. In the case of the 
Apache Foundation, it’s 20 people, and in the case 


| of the Perl Institute (which recently dissolved), 


just six. Could thinking of that core, rather than 


the top person in a hierarchy, as the leader pro- 


S THE former se- 

nior vice presi- 

dent of IS at Tal- 
bots, I found Carol Sli- 
wa’s article “A Classic 
Makeover” [Business, 
Sept. 18] to be very mis- 
leading. It sounds as 
though during my 
tenure, nothing was be- 
ing done at Talbots, the 
leadership was in disar- 
ray and no money was 
being invested in IS. 

Almost all of the initia- 
tives that are mentioned 
were well under way 
when [ and others left 
Talbots two years ago. IS 
spending had been pur- 
posely kept in line over 
the years as capital was 
channeled to store open- 
ings. The article fails to 
mention that Talbots’ 
systems were so bad 
when I joined the compa- 
ny that the computer of- 
ten wasn’t available to 
accept catalog orders and 
the register system was 
taxing incorrectly. 
During the 10 years I 

was with Talbots, sys- 
tems were developed to 
support international ex- 
pansion, and new POS, 
financial, payroll and hu- 
man resource, credit, 
sales audit, catalog and 
distribution systems 
were put in place. 


| Talbots had systems, leadership in place 


Bruce Ash 

Vice president, IS 

Dollar General Corp 
Goodlettsville, Tenn 
Bruce.Ash@DollarGeneral.com 
Editor’s Note: Computer- 
world intended no disre- 
spect toward previous em- 
ployees at Talbots in our 
story, nor do we believe 
any was implied. Our re- 
porter interviewed three 
long-term IT employees 
and the new CIO in re- 
searching the story, and 
we used dates and mone- 
tary figures supplied by 
Talbots. After the story 
ran, the company request- 
ed 100 reprints. 


Small failures matter 


ANY IT disasters 

begin before the 

project starts 
[“Companies Don’t Learn 
From Previous IT Sna- 
fus,” News, Oct. 30]. Ade- 
quately defining project 
objectives, articulating re- 
quirements, choosing 
project leaders and cham- 
pions and, most impor- 
tant, engaging the right 
service provider drasti- 
cally improve the chances 
for project success. 

Unfortunately, very 

few organizations have 
any best practices 
around project defini- 


Much has been written about leadership, and 


the field compels a close study of constants and 


best practices. But as the open-source movement 


indicates, leadership and management remain an 


open book, with many pa 


tion. That is why Prac- 
tice.com has set out to 
become the best in 
launching projects and 
matching requirements 
to the best service 
providers available 
Your article couldn't 
capture all IT disasters 
and had to focus on the 
largest. How many 
$150,000 to $1 million 
projects balloon out of 
budget and end up as fi- 
nancial disasters for 
midrange enterprises? 
Our experience is that 
these midsize projects 
also suffer from signifi- 
cant failure rates. 
Laurence S. Donahue 
President and CEO 
Practice.com inc 
Chicago 


No IT rookie here 


M SURE I speak for 

thousands of experi- 

enced IT profession- 
als in saying that employ- 
ment perks do matter 
(“C1Os: Recruit Train- 
able Rookies,” Page One, 
Oct. 16]. When corpora- 
tions are willing to save 
20% to 30% in compen- 
sation by hiring rookies, 
they’re passing up expe- 
rienced and, more often 
than not, certified IT 
professionals who can be 
200% to 300% more pro- 
ductive than the “train- 


ges yet to be written. D 


able rookies.” I for one 
will not accept rookie 
compensation packages 
Jon Willert 


ra One Ir 


Throw the case out 


HE APPEAI 
in the Microsoft 


S Court 


antitrust case has 
finally recognized that it 
is not competent to de- 
cide these issues, and 
both sides have conceded 
that point (“Court Caves 
in on Idea of Tutor for 
Microsoft Case,” News, 
Oct. 30]. That is an im- 
portant part of the pro- 
cess that I am confident 
will lead to a rejection of 
the government’s case. 
Winton Woods 
Director 
Courtroom of the 
Future Project 
University of Arizona 
Tucson 
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COMPUTERWORLD welcome 
comments from its readers 
Letters will be edited fo ty 
and clarity. They should be ad- 
dressed to Jamie Eckle, letters 
editor, Computerworld, PO Box 
9171, 500 Oid C sticut Path 
Framingham, Mass. 01701 

Fax: (508) 879-4843. Internet 
letters@computerworid.com 
Include an address and phone 


number for immediate verification 








What if you were 
absolutely right? 


Suddenly the leading of e-business is 
a much more place to be. 
No how many customers you attract. 


The on web applications has grown 
beyond anything imagined only a few years ago. 
But transactions mean more than lost 

. They mean lost customers and 

a damaged reputation. 


Web Applications Management. 

That's is needed. And the first company 

to a total enterprise in this vital 
new field, with no retrofitting of your 

is Tonic. 


The ability to -test and integrity 
assessments before systems go live. 

As as perform on-going monitoring. 
Make the e-world far less daunting. 

Even predictable. 


Up and in hours, not days. to use, 
yet with the scalability to simulate millions, 


not just of simultaneous users. 


That's Tonic. And that's better. 


www.tonic.com 
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DAVID FOOTI 


T 
Ak 


The flaws behind 
IT workforce 
salary surveys 


VER BEEN REBUFFED by your 
company’s compensation manager 
when you wanted to pay an IT 
worker more than what surveys were suggesting 
he should be paid? If you protested by whipping 
out some of your own well-researched (though 
informal) market-price 
data, you were probably 
met with a cascade of 
mumbo jumbo about 
“statistical validity,” “relia- 
bility coefficient,” “com- 
pa-ratio” and “representa- 
tive samples” before being 
shown the door. 


: But you should know 
DAVID FOOTE, a former : 
corporate compensation 
professional, is managing 
partner and research 
director at Foote Partners 
LLC, an IT workforce 
research and consulting 
firm in New Canaan, 
Conn. Contact him at 
dfoote@footepartners.com 


that many of the most 
popular IT salary studies 
being used today by cor- 
porate compensation de- 
partments and published 
by large, reputable human 
resources consulting 
firms are too poorly de- 
signed and executed to be worthy of serious con- 
sideration. It’s the dirty little secret of the IT 
benchmarking business. 

It’s not that these firms don’t know the com- 
pensation business; it’s their bread and butter. But 
they don’t know enough about IT workers. It has 
spoiled their ability to be dominant in this impor- 
tant employee segment and opened the door to 
numerous small but fast-growing, IT-savvy hu- 
man-capital boutique consulting firms. 

The problem begins with the passive, low- 
overhead way that most of these benchmarkers 
collect salary data. It’s a paper or online question- 
naire filled out by a human resources professional 
motivated by a quid pro quo arrangement, such as 
a big discount on a copy of the published survey. 

The instructions are fairly simple: “Here are a 
bunch of job titles that you will try to match with 
jobs in your company. Then, report to us what 
you're paying people in these jobs in the format 
we require.” There’s customarily a very brief 
description of each position. 

Job titles like financial analyst, accountant and 
sales representative are universally understood. 
But what does the average human resources per- 
son do with data warehouse architect, e-commerce 
programmer/analyst or business technologist? 
When the position is broad, like senior systems 
administrator, does it make any difference if the 
salaries of all workers with this title are added to- 
gether and an average salary reported, regardless 
of computing environment, such as MVS, Unix, 
NT or Linux? And what if the worker is part of a 
hot project team requiring specific functional 


business knowledge, strong project-management 
skills and up-to-date technical knowledge? 

It matters quite a lot from a pay perspective, 
but many respondents are oblivious or not moti- 
vated enough to care. Employers are constantly 
changing IT job content and definitions but leav- 
ing job titles untouched. You’re lucky if you can 
find decent coverage of the new titles on the most 
popular surveys, or meaningful data when they 
do show up. With passive surveys so deeply 
flawed, their statistical validity is laughable. 

Another problem with these prestigious survey 
firms is that they don’t publish often enough. IT 
compensation is too fluid to be benchmarked 
only yearly, yet that’s still the norm. IT managers 
need semiannual data and sometimes quarterly 
numbers for their most precious in-demand jobs. 

Above all, it’s important that you and your com- 
pensation department agree on which employers 
count most in shaping pay in your labor markets, 
and that they’re getting good intelligence about 
pay levels at these companies. The big survey 
firms sometimes rely too much on information 
collected strictly from their clients, or the firms 
sponsor local multiclient IT pay studies that don’t 
include the right jobs or key companies with 
which you compete for talent. D 


THORNTO 


The digital 
economy’s future 
banks on trust 


OU CAN’T HELP but be struck by 
how little we really think about 
trust. The throbbing irony of our 
digital society may well be that this quintessen- 
tially human trait powers 
the pulsing heart of the 
semitechnology-obsessed 
and certainly technology- 
accelerated New Economy. 

But trust is about to 
come out of the closet. 
When you increase trust, 
the New Economy booms. 
Decrease trust, the econo- 

THORNTON MAY is 
corporate futurist and 
chief awareness officer 

at Guardent Inc., in 

Waltham, Mass 


Contact him at 
thornton.may@guardent.com 


my tanks. 

The people managing 
the emerging digital econ- 
omy will have to manage 
and manipulate the supply 
of trust. Trust defines our 
future. Trust may even be regulated and mea- 
sured to the point that it shows up on our balance 
sheets. 

Very few people have noted that the typical 
Web visitor is surprisingly naive regarding the 
amount of trust already given to digital purveyors 
of goods and services. 

Consider the contemporary traveler who shows 
up at the airline counter with nothing more than a 
smile, a photo ID and an “electronic ticket.” The 
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magic ones and zeros magically collaborate to get 
him his requested aisle seat and credit him with 
frequent flier miles. 

We trust our Internet service provider or 
employer not to overmonitor and publicly reveal 
our clickstream behavior. Should we? Would you 
trust your priest to hear your confession online? 

The much-discussed migration to broadband 
technology in every home is predicated on the 
following: 


| @ Users trusting that always being connected to 


hundreds of millions of unknown and as-yet-un- 
proven-to-be-trusted e-buddies won’t be harmful. 
@ Users being educated, then taking appropriate 
action to manage the risk of ubiquitous connec- 
tion. For broadband to succeed, consumers must 
make significant progress in understanding what 
they can — and must — do to protect their digital 
assets. 

Like it or not, I fear we’re going to have to 
know what’s going on security-wise with the 
myriad of intelligent devices that will increasing- 
ly define and populate our world. We need to do 
an audit to determine which of the “things” in our 
lives we can actually trust. 

So, we may be doing this “trust” thing wrong. 
A quick-and-dirty examination of trust behaviors 
shows that the world deals with trust along two 
axes: things and whos. My research indicates that: 
1. Organizations are predisposed to overempha- 
size “things,” believing that we can buy some kind 
of technology that will make the trust issue go 
away. The biggest mistake CIOs will make over 
the next six months is to accept the unwinnable 
enterprisewide task of fixing the “trust problem” 
with technology. It can’t be done. Technology will 
be part — but not all — of the solution. Case in 
point: Senior management at one company 
thought that buying firewall software could keep 
out untrusted visitors such as viruses, bugs and 
Trojan horses. But computer enthusiasts (some- 
times referred to as “hackers”) have anointed 
firewalls as the “crunchy outside surrounding a 
chewy center.” 
2. Organizations and senior management groups 
tend to underfocus on the “whos,” not paying 
enough attention to whom we should or can trust. 

Most people, whether they work in the busi- 
ness or consumer space, have little or no training 
in the creation, management and expansion of 
trust networks. The herd mentality that has most 
of us unabashedly trusting and clicking away 
may soon give way to societywide top-of-mind 
awareness. I became aware only recently that the 
off-the-shelf software that I buy isn’t secure and 
can’t be trusted. I fear that such top-of-mind 
awareness may, in very short shift, give way to a 
stampede of animals who suddenly become 
aware of danger. 

What happens when we become aware of our 
fragility? The historical American instinct of how 
we confront frightening new awareness isn’t 


| good. (Remember the Salem witch trials? Mc- 


Carthyism?) Are we on the cusp of persecuting 
hackers? Will we all ‘disconnect’ and go into a 
‘Dark Ages’ of noncommunication? Can we trust 
our capacity to trust? D 
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The problem: your network is slowing down productivity, sales and even growth. The solution: BellSouth. 
We can give your compeny a data network that’s not only faster, but also smarter ana more efficient. 
By reconfiguring your existing infrastructure, we can give your network more functionality, so it can handle 
duties like transaction processing, data warehousing, security, storage and other more customized tasks 
that can help your business evolve. We'll also work with you to devise a comprehensive migration plan to 
keep you a step ahead of the competition, and make the future virtually unlimited. 
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© ah a) The editors of PC World magazine judged hundreds of products based on performance, consistency, innovation and 
& 


WORLD CLASS oa eee emacs elm eR) Le tC lm ae) Rota Tale Be Vea) (ola ot 1t-1e Oe Cte RRC top of our 


corporate and home PC charts.” These are just a few of the reasons that they chose the AMD Athlon” processor as “Product of the Year.” You'd think 
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we still can’t help but grin. You will too when you see what an AMD Athlon processor can do for your productivity. Log on to www.amd.com/pceworld. 
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[Business, Oct. 30]. I was born New York subway every day, mute from Bronxville, N-Y., to on a train, bus or subway. 


Calling all commuters in New York and believe traffic | and I can’t remember the last Midtown Manhattan by train is | Bob Gross 


has grown because of people time I was late for an appoint probably less than an hour. I New York 


JUST READ Cezanne Huq’s_ | who refuse to use one of the ment because of public trans guess some people think it is 

comments on commuting best public transportation sys portation. I do understand that | convenient to sit in traffic COMMENT by Marie 

by car to New York in tems in the country. I use the there are people who must alone rather than reading, re- Handschiegel illustrat- 
“Tales of Commuter Terror” Long Island Rail Road and drive to work, but the com laxing or speaking with friends ed one of the most an- 
noying things about my com- 
mute: people who wait until 
the last minute and then try to 
merge into the long line of 
cars that got in the proper lane 
ahead of time, or who, like 
Handschiegel, bypass stopped 
traffic by driving on the shoul- 
der. Thanks to Handschiegel, I 
now understand why they do 
it — they “feel better because 
[they] got past five or 10 peo- 
ple.” But why is their time 
more valuable? 

Even in Raleigh, I know cer- 
tain places where traffic backs 
up every day. If there’s snow, I 
know it will take me twice as 
long to get to work. But I fig- 
ure everyone is in the same 
boat and wants to get to his 
destination just as much as I 
| do. If everyone drove safely 
| and politely, it would make 
floods, snow and just plain 
congestion more bearable. 
Susan Marshall 
Raleigh, N.C 


RIK SHERMAN, like 

many journalists, quick- 

ly dismisses a potential 
solution in favor of telling us 
how bad things are going to 
get. He devotes a total of one 
sentence to analyzing light- 
rail: “High-tech solutions like 
light-rail might sound appeal- 
ing, but they’re more expen- 
sive than roads, according to 

Thé average life will last approximately 120 years. The Road Information Pro- 

In the future = gram in Washington.” 

Who says light-rail has to be 
high-tech? And is light-rail just 
more expensive to build, or is 
it more expensive in terms of 
harm to the environment, the 
dissection (and eventual de- 
struction) of neighborhoods 

| and the incalculable costs of 
| commuting stress? If Sherman 
doesn’t have the inclination or 
| space to give us the total pic- 
| ture, he should admit it. 
Marc Briand 
Ae Lawrence, Kan. 


CW SkillsVillage 


The average job.will last approximately two weeks. 





F COURSE commuting 

by car is “ghoulish.” 

That’s what happens 
when you use 2 tons of metal 
to move 170 or so pounds of 
flesh. Quit whining and use a 
train, bus, carpool or bike. 
Lisa Brandt 
Chicago 

More Letters, page 44 





Ignite Your 


Digital 
dranding 


“If you want to get venture capital, you’d better 
read this book. Companies will either brand or die. 
It’s up to you.” 


—Guy Kawasaki, CEO, Garage.com, Palo Alto, CA 


“This book is a roadmap for exploiting the unique 
brand-building opportunities of the Net.” 


—AI Ries, Ries & Ries Focusing Consultants, Roswell, GA ; 
Firebrands! 


Building Brand Loyalty 
“Michael has captured the essence of branding in in the Internet Age 
the Internet age. His research is impeccable. ee ue es 
This is a must read for anyone in marketing.” pee 


—Andy Brownell, Director of Marketing, Compag Computer Corporation 
Learn how to extend your brand 
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Available at online retailers and bookstores everywhere 
For more information on these and other Osborne/McGraw-Hill titles, 


visit our website at www.osborne.com. 
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www.osborne.com BOOKS FOR IT LEADERS 
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CO Look around. You're in the midst of a global maelstrom. A swirling mass of converging 


technologies and new business opportunities unleashed by the Internet. All waiting to be harnessed by 
companies like Fujitsu — the world’s third largest IT services provider: We've focused our energy and 
resources on creating technology to 


WHEN YOU CLOSE YOUR EYES. 
WHAT DO YOU DREAM? solve the unique problems of thousands 


WHEN YOU OPEN YOUR MIND TO THE 
FULL POTENTIAL OF THE INTERNET, of individual businesses. Last yea 
WHAT DO YOU SEE” 
alone we invested $4 billion of our 
$50 billion global IT and telecommunications revenues on R&D. Imagine, $4 billion. That’s more 
than the total sales of many Fortune 500 companies. But that’s what it takes to create next generation 


mobile technology, ultra-high-speed servers and leading-edge photonic networks. Innovations that 


keep your business one step ahead of the Internet. And light years ahead of the competition. 


co 
FUJITSU 


THE POSSIBILITIES ARE INFINITE 


www.fujitsu.com 
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H-1B survey leaves too many questions unanswered 


HE FINDINGS are con- 

trary to what I’ve expe 

rienced [“Study: H-1B 
Crucial to Economic Growth,” 
Page One, Oct. 30]. Publishing 
conclusions without the basis 
implies a validity that is not 
necessarily there. Who funds 
the National Academy of Sci- 
ences? Who and where did it 
survey? What proportion of 
the survey focused on man 
agement responses vs. em 
ployee responses? What per 
centage of the respondents 
were “older”? 
David Heller 


~ 4) rc 
Salinas, Ca 


E CAN slice and dice 


the H-1B visa debate 


any way we want, 
but if anyone truly believes 
that U.S. workers are not get 


ting shafted, then he has never 


tried to break into a C++ or 


rhic.com. 


ng. EOE 


RHI Consult 


Java job with a Cobol or struc 
tured language background. 
Randy Marsh 

Walnut Creek, Calif 


StarDisk@aol.com 


N 1994, I was downsized as 
[as gripped Massa- 

chusetts, so I joined a job- 
hunting and counseling group 
sponsored by the federal gov- 
ernment. One of the first 
lessons was that age discrimi- 
nation is real. Most of us as 
sumed it started at age 40; the 
facilitator shocked us by say 
ing it began around age 37. 

Now the government says 

there’s “no definitive evidence 
of age discrimination”? That 
facilitator sounded definite. 
People in the groups definitely 
thought they had encountered 
it. Who do you believe: the 
workers who can’t get jobs 
and the facilitators within the 


government’s own jobs pro 
grams, or this latest report? 
Ed Lawrence 

Natick, Mass 


ITH the layoffs in 
the e-world, there 
should be an equal 


amount of relief in pressure for 
H-1Bs. Also, have the organiza- 
tions that are pressuring to in- 
crease the number of H-1Bs 
given any thought to how they 
would handle a reduction in a 
force made up of H-1Bs? 

Paul D. Lane 

Consultant 

Futron Corp 

Washington 

plane@futron.com 


DHL at another level? 


HE ARTICLE “Delivery 

Firms Pump $230M 

Into Wireless” [News, 
Oct. 23] is a little misleading. 
An analyst is quoted as saying 
that DHL Worldwide Express 


is “not at the same level” as 
UPS and Federal Express in 
deploying wireless technology. 

DHI deploy ed the first 
wireless tracking service for 
WAP in October 1999. This 
was followed by multiple oth- 
er wireless services. 

While wireless use may be 
an exciting departure for U.S. 
companies, for real global 
companies like DHL, it is just 
one of the familiar, integrated 
channels of data collection 
and service provision. 

Colum Joyce 

E-commerce strategy manager 
DHL Global Coordination Center 
Brussels 


Escrow limits ASP risks 


READ with interest your 

article on the risks associ- 

ated with application ser- 
vice providers [“Avoiding ASP 
Angst,” Technology, Oct. 16]. 
While I agree wholeheartedly 
with your list of questions to 
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ask before signing up for ser- 
vice, one of the most impor- 
tant was omitted: Will the ASP 
agree to signing a technology 
escrow agreement? 

By establishing a technology 
escrow account, ASP clients 
would have access to the 
source code and any critical 
data for the application being 
hosted. The release of that in- 
formation to the client can be 
tied to any number of condi- 
tions, including bankruptcy, 
loss of support or even the de- 
parture of key personnel. With- 
out a technology escrow con- 
tract, it is difficult to effectively 
limit the risks of doing business 
with ASPs. Remember, ASPs 
have proprietary technology 
and data that normally would 
reside on-site at the client’s lo- 
cation. Technology escrows 
can mitigate both risks. 


| John Boruvka 


Vice president of sales and marketing 


| DSI Technology Escrow Services 
| San Francisco 
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KEEPING 
SECRETS 


Secret offshore data 
havens are more than 
a myth of cyberpunk 
novels. HavenCo, which 
is based on a former 
antiaircraft gun plat- 
form off the coast of 
England, promises to 
host servers for cus- 
tomers and will dump 
data — and possibly 
servers, too — if the 
law comes looking for 
clients’ secrets. » 50 


CULTURAL 
CONNECTIONS 


Time and technology 
issues aren’t the only 
pressures on IT folk. 

An increasingly diverse 
workforce is pushing IT 
workers and managers to 
adjust to multicultural 
differences. It’s also forc- 
ing foreign workers to 
stand up to insensitive 
U.S. colleagues, Kathleen 
Melymuka writes. » 55 
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E-COMMERCE 


Affiliate marketing and 
advertising are waning 
as e-commerce revenue 
sources, but a host of 
vendors that will build 
the infrastructure and 
sell your products for 
you in return for a cut 
of the revenue are crop- 


ping up. » 56 
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Third-generation broad- 
band wireless technolo- 
gy is going to sweep 
through corporate Amer- 
ica, Peter GW. Keen pre- 
dicts. IT folk shouldn’t 
worry about consumer 


PUTTING THE 


gadgets, however. The 
real impact will be in 
cutting wires inside the 
enterprise to make the 
whole place more pro- 
ductive, he says. » 60 
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WEB ATTACKS 


Wouldn't it be nice to 

take online revenge 
against hackers who bust 
your site? Tools to do 

just that are proliferat- 

ing, but counterattacking 
is a risky and legally un- 
tenable response, warn 
experts, who worry that 
innocent bystanders may | 
end up victims in a hack- | 
ing war.»73 
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Data Haven Says It Offers 


Freedom From Observation 


Attitude and questionable nationality may 
make HavenCo the hot place to hide data 


BY ANN HARRISON 

valu- 

able data that you 

would like to store 

beyond the reach 

of regulators, nosy 

competitors and litigators? Of- 

ficers at anew company based 

on a former World War II gun 

platform six miles off the coast 

of England promise that they 

can house your servers or data 

with little or no risk of it falling 
into the wrong hands 

HavenCo Ltd. was founded 

as a co-location facility whose 

value that it 

won't cooperate with national 


proposition 1S 


or international courts that or- 
data. “We 
offer a unique service where a 


der it to disclose 
single piece of paper will not 
give anyone access to our 
clients’ data,” said Jo Hastings, 
HavenCo’s chief marketing of- 
ficer. “We are not necessarily 
going to engage in warfare; we 
will just destroy the data.” 
HavenCo’s headquarters are 
in the British West Indies, but 
its co-location facility is on a 
60-foot tower rising out of the 
North Sea, in 24 feet of water, 
six miles east of the industrial 
port of Felixstowe on the 
southeastern coast of England. 
Once part of a network of anti- 
aircraft fortresses built to 
shoot down Nazi bombers en 
route to England, the platform 
was abandoned after the war. 
In 1967, a bold former British 
army major named Roy Bates 
took advantage of a loophole in 
international law called “dere- 
liction of sovereignty” to seize 
the tiny platform, declare it the 
independent nation of Sealand 
and proclaim himself prince. 
Neither Britain 
any other country has recog- 
nized Sealand’s 
but its ambiguous legal status 


Great nor 


sovereignty, 


gave HavenCo’s founders the 
chance to rent space to store 
servers and build Internet con- 
nections to offer to customers. 

Hastings said HavenCo has 
signed as many as two-dozen 


companies and organizations 
for a 90-day beta period. After 
fine-tuning its services and 
back-end systems, it will then 
open for business, charging 
$1,500 per month for a standard 
unit of rack space, plus band 
width costs. HavenCo plans 
to launch another co-location 
facility at an as-yet undisclosed 
location within six months. 
Hastings said demand for 
HavenCo’s co-location — ser- 
vices has been driven by con 
cern over the British Regula- 
tion of Investigatory Powers 
bill, which gives the govern- 
ment the 
electronic eavesdrop- 
ping. It has also been spurred 
by the FBI’s Carnivore Internet 
surveillance system, which has 


power to conduct 


covert 


alarmed U.S. privacy activists. 

“Carnivore just couldn’t have 
done a better job for us. We 
happy when that 
came out,” said Hastings, not- 
ing that many nations conduct 
surveillance and that it’s not 
just criminals that would like 


were real 


to avoid it. “We like to think of 


ourselves as a common-carrier 
type of business; criminals use 
the road, but a lot of good peo- 
ple use the road, too.” 


Once Science Fiction 

Data havens free of govern- 
ment control were first imag- 
ined by science fiction writers. 
The idea surfaced in the 1975 
novel The Shockwave Rider by 
John Brunner, as well as other 
“cyberpunk” novels, including 
Neal Stephenson’s Cryptonom- 
icon, published last year. 

When Bates took over the 
6,000-square-foot platform, it 
was beyond the existing terri- 
torial limits of Great Britain. It 
has maintained its relative in- 
dependence, despite Britain’s 
expansion of its territorial lim- 
its to 12 miles, which encom- 
passes the platform. 

According to a press officer 
at the British consulate in New 
York, the British government 
doesn’t recognize the sover- 


eignty of Sealand. However, the 
government has generally kept 
its hands off, possibly because 
it was founded before Great 
Britain claimed the waters in 


which it stands. 


The British Department of | 


Social 
ruled in 


Health and Security, 
for example, 1984 
that Roy’s son, dubbed Prince 
Michael, doesn’t have to pay his 
national health insurance fees 
when he lives in the fortress. 
The pension department also 
determined that Roy’s military 
pension shouldn’t be paid to 
him when he resides in Sealand, 
because he isn’t in England dur- 
ing that time. 
When Michael 
warning shots at workmen ser- 
vicing a buoy near the plat- 
form, he and Roy were charged 
with weapons violations. But a 


Bates fired 


LE 


British ruled that the 
laws didn’t apply because they 
were outside the three miles 
that Great Britain then claimed 
as its territorial waters. 


court 


Not Defenseless 

Despite its minuscule secu- 
rity force, Sealand isn’t de- 
fenseless. It has threatened to 
launch a public relations war 
to defend itself if attacked. 
Also, the extension of Great 
Britain’s territorial limits 
that any country at- 
tacking the fortress would 
have to enter British territor- 


means 


ial waters, which would trig- 
ger defenses from the U.K. 

HavenCo 
tomers offering anonymous 
payment systems, online gam- 
bling, pyramid schemes and 


supports cus- 


pornography. 


ne 


ae -- ie 


HAVENCO PROMISES that it can keep clients’ data secure by 
housing servers in a former gun platform, where sovereignty is 


uncertain but isolation is absolute 
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The company’s acceptable- 
use policy forbids spamming, 
computer hacking and child 
pornography. Hastings said 
such activities could prompt 
law enforcement or Internet 
service providers to shut down 
its mainland Internet connec- 
tions. HavenCo will drop of- 
fending Web sites or services 
that jeopardize its access to the 
Internet, Hastings added. 

She claimed that HavenCo 
has received several hundred 
queries from businesses inter- 
ested in co-location services 
and Web hosting, which it 
doesn’t provide. Distributed- 
processing and file-sharing 
companies have been one of 
the largest groups of prospec- 
tive customers, Hastings said. 

Many people have also writ- 
ten to demand that HavenCo 
host embattled music site Nap- 
ster for free, she said. However, 
a spokesman for Napster said 
the company isn’t interested in 
HavenCo’s services. Hastings 
said Internet casinos have 
asked to locate their transac- 
tion servers at Sealand. Some 
businesses that offer electron- 
ic-cash systems are also said to 
be interested. 

Most customers said they 
are interested in co-location 
facilities for e-mail archiving 
or secure data storage. The 
majority of inquiries have been 
for secure transactions. 


No Physical Access 

According to Hastings, even 
customers won't have physical 
access to the Sealand fortress. 
Customers can provide their 
own equipment, as long as it 
is X-rayed and examined for 
bombs or surveillance devices 
before installation. 

Although HavenCo techni- 
cians perform basic mainte- 
nance on the machines, the 
servers themselves are run 
remotely by customers who 
are responsible for their own 
actions. Hastings said clients 
must indicate ahead of time 
whether they want to be reim- 
bursed for the cost of servers 
that will be sacrificed if Britain 
or another legal entity makes a 
credible demand for their data. 

Citing privacy and security 
concerns, Hastings declined to 
name any firm that has signed 
on as a beta customer. The 
only customer HavenCo has 
named previously is Tibet On- 
line, which represents the ex- 
iled Tibetan government and 

Sealand, page 53 








MILLION DOLLAR SERVICE 
WITH OVER 


IN SAVINGS. 


Saks Incorporated has long been famous for attentive, personal service. So when they wanted to restyle their customer service operations for today’s eBusiness 
environment, they chose Aspect. Using Aspect’ eCRM solutions, Saks integrated three contact centers into a single virtual contact center. Without adding 

a single agent, Saks now handles 16% more customer interactions. Whenever—and however—their customers. choose. It’s all resulted in three-quarters 
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Unless you have the right business continuity plan in place. SunGard can help, with a 
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And now we apply our disaster recovery experience and aggressive pricing to your other 
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Continued from page 50 


Sealand 


seeks to operate without the interfer- 
ence of China. 

On the eve of the beta launch last 
month, David Del Torto, executive di- 
rector of the San Francisco-based Cryp- 
to-Rights Foundation, announced that 
his organization will be among the first 
group of data-haven pioneers. 

“It is important to be hosted by a 
government that is very friendly to the 
basic concepts of freedom,” he said. 
“We can’t really do that in this country 
anymore, and it is important to have 
one place in the world where we can.” 

Jim Dempsey, senior staff counsel 
at the Washington-based Center for 
Democracy and Technology, said any 
attempt to avoid the geographical juris- 
diction of governments is ultimately 
futile, because nations can still exercise 
jurisdiction over their citizens and ar- 
rest employees of HavenCo or freeze 


bank accounts on their own shores if 


the threat is deemed great enough. 


Investor Confidence 

Investors, however, are banking on 
HavenCo keeping its head above water. 
The data-haven project has attracted 
investment capital from Avi Freedman, 
vice president of network architecture 
at Akamai Technologies Inc. in Cam- 
bridge, Mass., and Joichi Ito, chairman 
of Infoseek Japan. Freedman reportedly 
invested $500,000, and Ito reportedly 
put in $200,000. Another $400,000 was 
raised from anonymous investors. 


HAVENCO’S DEFENSES include the ability to destroy 
servers to avoid handing over data to governments 


Hastings said HavenCo’s goal is to 
raise a total of $3 million before it clos- 
es its first round of funding at the end 
of the year. She confirmed that Freed- 
man is interested in supporting Sealand 
partly because it could inspire other 
nations to rethink their laws on data 
surveillance and other restrictions 

In the meantime, the process of turn- 
ing a gun platform into a fat-pipe server 
forward. HavenCo 
has paid an undisclosed sum to the 


farm is moving 
Bates family for a one-year lease on 
Sealand, with an option to purchase 
The fortress is now equipped with two 
generators, a large fuel tank and enough 
food to endure a year-long blockade 

Nearly all of the seven 22-foot rooms 
inside each of the platform’s support 
cylinders are being transformed into 
machine rooms, using the existing blast 
doors to withstand explosions. Haven- 
Co is seeking to stuff the cylinders with 
enough data storage, servers and trans- 
action processors to create a global net- 
working hub. 

Del Torto said he believes HavenCo 
is the ideal place to locate his founda- 
tion’s archive, mailing lists and double 
blind remailers for anonymous e-mail. 

“We will put up a massive archive 
with everything published about cryp- 
tography, plus source code and tools, 
and no matter what country you live in, 
you can download whatever you like,” 
he said. 

HavenCo’s $1,500 monthly fee in- 
cludes basic management, possible ex- 
tended management, physical security, 
power and discounts for prepaying for 
10 months. There’s also a $1,500 set- 
up charge per machine. HavenCo said 
it can accommodate 
up to 10,000 
dard units of rack 
space without 
panding. It has also 
promised to deliver 
almost 1G byte/sec. 
of Internet band- 
width by the end of 
the year at cheaper 
prices than those in 
Europe. 

According to Ryan 
Lackey, HavenCo’s 
chief technology of- 
ficer, the company 
is still a few months 
away from provid- 
ing this, but it can 
offer 1G byte/sec. as 
needed to its edge 
caches, with tens of 
megabits per 
ond to the facility 
through diverse 
routes. Lackey said 
HavenCo will buy 
transit and peering 
agreements from In- 
ternet service pro- 
viders at multiple 


stan- 


ex- 


sec- 
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locations around the world and that it 
will install high-capacity routers at 
major facilities. By installing routes and 
peering at remote locations, Lackey 
said, HavenCo can install edge caches 
and then handle the return of data back 
to Sealand servers. 


Satellite Backup 


If potential providers such as Am- 
Internet Exchange BV and 
London’s Telehouse International Cor- 
poration of Europe Ltd. are pressured 
to cut Sealand’s link, HavenCo said it 
can reroute data to satellite communi- 


sterdam 


cations and other Internet service 
providers. 

In May, HavenCo installed three 
satellite connections, but Hastings de- 
clined to name the providers. HavenCo 
has also set up a 155M bit/sec. micro- 
wave link, provided by New York-based 
Winstar that 
Hastings said HavenCo is testing. 
predicted that HavenCo 
will pull in between $50 million and 
$100 million in revenue by the end of its 
third year in business. But, she added, 
much of the money will be reinvested 


Communications Inc., 


Hastings 


ever WISH 


you knew someone 


was there BEFORE you called? 


in expensive projects such as 
fiber to the fortress, a projec 
pany hopes to finish late nex 
Neither the U.K. nor any other nation 
has yet attempted to exercise jurisdic 
tion over Sealand, Hastings said, but at 


cut Haven 


Co’s Internet connection could be 


tempts by angry nations to 
best 
‘ountered with redundanc 
countered with redundancy 
“We would like to get multi 
dictions in the next year and a server or 
two running in a few different places so 
heir best 


that if they cut us off, despite 


efforts, we will have 
where,” said Hastings 
Del Torto 


are good that some nation will 


said he believes ch 


harass HavenCo, but the intell 
community will probably choose 
interruption of connectivity rathe 
direct intervention. 

“There is always an opportunity 
someone to come in with a big stick 
threaten them, but their bus 
seems quite sound for having 


to that kind of thing,” said De 
Harrison is a freelance writer and former 


Computerworld staff writer. 


www.eDial.com/cw 





Don’t be mystified by SAN solutions. 
The choice is clear. 


Combining award-winning Fibre Channel switches and SAN management 
software, Brocade solutions provide scalability, simplified storage management, 
system interoperability, and availability. Brocade partners with major storage 
and systems OEMs and Integrators to provide SAN solutions optimized for 
LAN-free and serverless backups, storage and server consolidation, disaster 
tolerance, and high-availability applications. It’s no wonder that Brocade is 


the industry leader—and the clear choice—for SAN solutions. 
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IT ‘Outsiders’ Don’t 
Have to Feel Alone 


OR MINORITIES IN IT, landing a job is only half the battle. 
In their book, From the Outside In (Amacom Books, 2000), Renee Blank, Sandra 
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of Asian-Americans, 


sel’ Ts only 65° 
~ 4 50% of blacks and 40% of Latinos 


> - 


feel that way. “Take risks!” Slipp 
says. “Don’t be so cautious 
a new way of doing things and pro 
pose it.” 

People from other cultures often 
resist this kind of advice for fear of 
“selling out” to fit in, Slipp says, but 
she stresses that buying into the 
work culture doesn’t mean selling 
out your own. “You can maintain 
stretch 


your own culture but 


how you can also fit into the organi 


Slipp and Vincent Ford write about people who find themselves isolated from their zation,” she says 


co-workers and unhappy on the job because of their race, gender, age, ethnicity, sexual 
orientation, religion or disability. While the book looks at the U.S. workplace in gen- 
eral, Slipp suggests in an interview that much of its advice is particularly applicable to minority 


workers in IT. 

The book uses a series of case 
studies to illustrate problems and 
solutions for minority workers. It 
cites Fred, a black senior engineer 
who feels increasingly isolated and 
disrespected at his new company 
and concludes that his co-workers 
are racially prejudiced; Waheed, a 
project manager and Pakistani 
immigrant who seethes when col- 
leagues joke that his Muslim reli- 
gion makes him sympathetic to ter- 
rorists; Karen, a Chinese-American 
systems analyst whose cultural incli- 
nation to be reserved and 
respectful of co-workers 
leaves them uncertain of 
her expectations; and 
Dan, a disabled systems 
analyst who feels so vul- 
nerable that he’s afraid to 
take any of the risks nec- 
essary to move forward 
on his job. 


Anticipating Bias 


Slipp notes that minori- 
ties sometimes anticipate 


KATHLEEN MELYMUKA is a 
Computerworld feature 
writer. Contact her at 
kathleen_melymuka@ 
computerworld.com. 


in your long-term interest,” Slipp 
says. “If you act hostile or withdraw 
you suffer.” 

Slipp says cultural characteristics 
frequently get in the way of ad- 
vancement, especially in IT. While 
Americans are taught that “the 
squeaky wheel gets the grease,” 
Asians learn that “the nail that sticks 
up gets pounded down,” and His- 
panics feel it’s rude to speak out and 
“take the place of honor” from those 
with more seniority or experience. 
As a result, an Asian may not ask for 
a raise or new assignment because 
drawing attention to her- 
self is contrary to her 
cultural mores. A Latino 
may not speak up at a 
meeting, feeling that 
would show disrespect 
for those with more se- 
niority. Both may expect 
that their work will speak 
for itself, and they may 
end up quitting if they 
don’t get the recognition 
they think they deserve 

“You must make peo- 


bias, and those expecta- 

tions can become self-fulfilling 
prophecies. “Many people expect 
the worst,” she says. “They think 
there will be prejudice out there, 
and they don’t look for people who 
will be friendly to them.” 

Fred and Waheed, for example, 
need to give people the benefit of 
the doubt and recognize the differ- 
ence between misguided kidding or 
ignorance and actual hostility, Slipp 
says. They may be tempted to with- 
draw rather than confront people 
over hurtful comments, but that 
would be a mistake. 

By explaining differences to co- 
workers, they can educate them, 
clear the air and make everyone 
more comfortable. “Remember, it’s 


ple aware of what you 
have accomplished and what you are 
able to do,” Slipp says. For example, 
she advises, speak out, talk about 
projects, be a resource to others. 

IT workers — particularly those 
from outside the dominant culture 
— have to resist the inclination to be 
loners, she says, adding, “Fifty per- 
cent of your job is interpersonal 
relations.” That means you need to 
make an effort to connect, even if it’s 
just stopping at someone’s desk and 
making conversation. “Maximize 
mutual interests,” she advises. 
“Empathize with someone else’s 
problems. If someone asks you to go 


| out for lunch with them, go.” 


Outsiders like Dan, the disabled 
systems analyst, often feel particu- 


If ever there was an opportunity 


for diversity to flourish, it’s today ir 


} 
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IT. But according to Slipp, it t 


initiative and daring. 
larly visible and vulnerable, and as a 


King 


: “The concrete ceiling is crac 
result they seem to be more risk and it is possible to move forward 


verse th srs, Slipp says. This | ' ; 
averse than others, Slipp says. This but nobody will pluck you up and d 


is also true of racial minorities. A _ | it for you,” she says. D 
national survey conducted by one of 
the authors found that while 85% to 
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90% of whites feel they take risks on M ada INLINE 


the job to advance their careers, Forum at www.computerworld.com/diversityforum 
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E-Commerce 


Outsourcers promise 
profits, low effort 


BY JULIA KING 
Senior management, investors 
and shareholders are all de 
manding that Web sites make a 
lot more money than banner 
affiliate 
sales have been bringing in. 


advertisements and 

As a result, more companies 
are focusing on direct product 
sales, often with the help of a 
new breed of e-commerce ser 
vices provider that, for a share 
of the will handle 
contracting 


profits, 
everything from 


with product suppliers and 


warehousing inventory to 
shipping orders and collecting 
payments. 

CrossCommerce Inc., Vites 
Inc., Icono- 


sa Corp., iVendor 


my.com Inc. and Escalate Inc. 
are among these new private 
label e-commerce players. 

They all operate behind the 
scenes, invisible to visitors at 
their customers’ Web sites. 

In some cases, users of these 
new outsourcers said they can 


make as much as three times 


the profits they made previ 
ously under affiliate marketing 
deals with online retailers such 
as Amazon.com Inc. 

“The affiliate model is much 
hand-off of 
client,” said Carol Baroudi, an 


more of a your 
analyst at Hurwitz Group Inc. 
in Framingham, Mass. “The 
draw is in keeping your client, 
which is enabled by 
third-party providers.” 

“We wanted higher margins 
and more flexibility,” said Carl 
Ware, manager of e-commerce 
San 
Francisco-based Imagine Me- 
publishing 
uses San Fran- 


these 


business development at 


Internet 
that 


cisco-based CrossCommerce’s 


dia, an 
company 


service. 

With affiliate marketing, 
“you're primarily taking peo- 
ple to another property, and 
you're getting about a 5% com- 
mission,” he said. “With Cross- 
Commerce, the [profit] margin 
is built in at 40%, which you 
share with CrossCommerce, 
but get to keep between 75% 
and 80%.” 

Vendors tout the minimal in 
vestment users need to make 
in both information technolo- 


FROM 


BUSINESS 


gy and dedicated e-commerce 
personnel. 

When Nicasio, Calif.-based 
Lucasfilm Ltd. the 
movie Star Wars, Episode I: 


released 
The Phantom Menace, it was 
Sunnyvale, Calif.-based iVen 
dor that handled all of the on 
line preorders that were to 
come bundled with a special 
Star Wars poster. 

“Lucasfilm wanted to do the 
preorders, but they had too 


Solution: Let Someone Else Sell Your Product 


many internal initiatives,” said 
Jay Millman, vice president of 
marketing at iVendor. 

Behind the scenes, iVendor 
handled all of the supply-chain 
systems integration necessary 
not only to process the video 
orders but also to package each 
video with a poster available 
only by ordering at the Star- 
Wars.com Web site. 

Such processes are possible 
because “as more 


we_ get 


Affiliate Marketing vs. 
Selling Via E-Commerce Outsourcers 


AFFILIATE SALES 


>Profit margins average between 5% and 10%. 


> Web site visitors are redirected to a different Web site 


to make purchases. 


»Separate partnerships with multiple product suppliers 


are required. 


E-COMMERCE OUTSOURCERS 


»Customers keep between 75% and 80% of profit margin. 


»Customers pay one-time setup fees and monthly 
maintenance fees that typically start at $100,000 and 


$500, respectively. 


>Customer has one contract with outsourcer; outsourcer 
handles multiple contracts with suppliers. 


Only today matters 


UST WEEKS after the World Series, nobody 
thinks about the New York Mets anymore. 
Which only goes to prove that you are only 
as good as your last assignment. CIOs and 
IT managers are judged not on what they 
did three months ago but on what they are 


doing today. 


That’s one reason why it 
was a Struggle to get Evan A 
Bauer, director of global in- 
formation technology at 
New York-based Credit Su 
isse First Boston Corp., on 
the phone. 

Bauer and his team man- 
age 80 public Web sites and 
1,500 intranet sites, support- 
ed by nine data centers. 

The day I called, the back- 
up system for his Web sites 
had kicked in because the 
main system had unexpect- 


edly crashed. Not good, but 
not unusual for such a big 
Web site. 

CIOs and IT managers 
have to juggle such emer- 
gencies every day. 

Credit Suisse uses Sunny- 
vale, Calif.-based Interwo- 
ven Inc.’s TeamSite content- 
management software and 
services to reduce the load 
of managing thousands of 
pages with content from 
many sources. 

It’s a 24/7 job, and not one 


that can be interrupted easi- 
ly. I spent a lot of time on 
hold that day. 

While waiting, I connect- 
ed with another hyper tech 
nology manager, Ken Ven- 
ner, the new CIO of Irvine, 
Calif.-based Broadcom Corp. 

His role at Broadcom, 
which designs telecommuni- 
cations chips, requires in- 
stant response to IT issues. 

“We had to move 25% of 
our staff in Northern Cali- 
fornia from one location to 
another quickly, without any 
downtime for the engineers 

- customer accounts, sales 
records, everything,” said 
Venner. 

“T have to know what’s go- 
ing on with the engineers so 
I can be ready to support 
memory needs, or I have to 


prepare for huge network 
needs at the end of a design 
cycle,” he said. 

Some requests that might 
fall in the “miscellaneous” 
category also need to get 
filled fast. 

Case in point: Henry T. 
Nicholas III, the president 
and CEO of 
Broadcom, was 
yachting in the 
Caribbean. 
Nicholas needed 
high-bandwidth, 
full Tl capability 
on the boat. He 
needed a seamless 
transition from 
desktop to top- 
side. With a CEO 
who Venner char- 
acterized as “in- 
tense and fo- 


cused,” the chal- 

lenge of getting the satellite 
dish on the boat and deploy- 
ing the network brought 
new meaning to the word 
now. Venner’s crew beat the 
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Computerworld’s West 
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clients, we have leverage to go 
back to our suppliers and ne- 
gotiate and demand better of- 
fers,” Millman said. 

CrossCommerce — through 
partnerships with product 
manufacturers and distribu- 
tors — also has its own elec- 
tronic catalog of some 18 mil- 
lion products. Customers can 
point and click through these 
to embed individual products 
the content pages of 
their own Web sites. 

Alternatively, CrossCom- 
merce has an automated mer- 
chandising application that 
reads through Web page con- 
tent and then automatically se- 
lects appropriate products and 
embeds them on a customer’s 
Web page. 

“You're kind of at the mercy 
products they 
have as they’re building up 
their own inventory, which is 
one of the drawbacks,” said 
Ken Arnold, CEO of Miami- 
based EnSpot.com Inc., which 
lists more than 1 million music 
festivals entertainment 
events at its Web site. 

“But the flip side is that if I 
focused on products I would 
want, I'd also have to worry 
about the management and 
programming aspects” of 
e-commerce, Arnold said. D 


within 


of whatever 


and 


deadline. The CEO never 
knew how hard it was. 

By this time, Bauer had 
put out his latest fire and 
was back on the phone with 
me. He gave me a rapid-fire 
description of how TeamSite 
cut the number of content 
change-induced problems 
by 95%. 

What was 
more compelling 
was how fast 
they moved to 
TeamSite. They 
moved all their 
pages into it in 
one weekend. 

All in a day’s 
work for a CIO 
— who must op- 
erate at a speed 
people in other 
business units 
are just starting 


to get used to. 

The network's always on. 
You're always on call. And 
you're only as good as your 
last project. D 
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with eDial . 
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“Click to call” dialing from your Outlook or Palmy address book, group calling and more. 


With eDial, all your communications wishes are granted. eDia! uses the Internet to leverage 
your electronic address book. The result? Radical new capabilities for you and your telephone: 


* Click to cali directly from Outlook and Palm for speedy, no-brainer dialing. (If you don’t 
already have an electronic address book, eDial lets you create one at no extra charge.) 


* A click of your mouse brings in up to 8 people on a group call—with no PIN numbers, added 
fees, or complicated conference bridges. 

Enjoy secure Instant Messaging when a quick message is all you need—and have the option 
to turn it into a real phone call with a simple click. 

* Want to encourage more callbacks? eDial provides you with a toll-free “800eDial” URL to 
e-mail to your customers or prospects—all they do is click on it to call you back. 


Visit our website and sign up today. Or, go through our quick demo and see how easy it is to quit 
snail-dialing and start eDialing! 


www.eDial.com/cw 
877.638.2835 


©2000 eDial, inc. eDial service requires a PC, separate phone line, and Windows 95, 98, NT or 2000 software. eDial, eDialer, and 800.eDial are trade- 
marks of eDia!, Inc. AH other product names are the property of their respective owners. 
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. when he was running the com- | Maloy said. “You just want to 
fl eme anges nsurance ac ices pany’s Princeton, N.J., office | become one of them.” 
and selling insurance to high- But moving the agency on- 
BY MARIA TROMBLY nesses in New York. But when | pany was doomed. “I killed it,” | tech firms. line wasn’t simple. 

For 128 years, five generations | it came time for Richard Maloy | Maloy readily admits “If you hang out with these The problem, according to 
of Maloys provided casualty | Jr. to take over the family busi The problem? Maloy was | [tech] guys long enough, you | Todd Eyler, an analyst at For- 
and property insurance to busi ness from his father, the com bitten by the technology bug | get inspired by what they do,” | rester Research Inc. in Cam- 
bridge, Mass., is that individual 
insurance carriers haven’t been 
able to simplify and standardize 
application forms. The most 
likely place for that innovation 

is with the agents, he said. 
“The carriers tend to react 
and not be proactive,” he said. 
“But if they have an agent that 
writes a lot of business for 
them and comes in with an 


idea that makes them more 
efficient and can bring in more 
eS S business, they will listen.” 

To take advantage of the new 
possibilities, Maloy got his fa- 
ther to sell off the family busi- 
ness. He then formed Insur- 
ance Revolution Inc. (www. 


insurehightech.com) to concen- 


users accessed portals powered by Verity. || ssontiehtecnctienss 


re Electrifying Forms 


Managing your information is critical Since it’s an uphill struggle 





to your business success. After spending to get all the carriers to agree 
millions to bring users to your portal, on a single application form, 

Maloy decided to jump-start 
the process by streamlining 
the communications with one 
of his carriers, St. Paul Cos. in 
St. Paul, Minn. The first step 
was to simplify paper forms 
and turn them into XML fields 
to be used in online forms and 
electronic data transmission. 
robust and flexible portal solutions This part will be up and run- 


yre you fully maximizing your returns? 


Verity, a recognized industry leader, powers 
business portals that deliver information 
when and where it’s needed 


>» business leaders already use Verity 


<i 
f 
sot 


tware. Turn to the leader for scalable 


ning by next month, he said. 

Meanwhile, Maloy is work- 
ing with his other carriers — 
including American Interna- 
tional Group Inc. (AIG) in 
New York, Atlantic Mutual 
Cos. in Madison, N.J., and four 
others — to add their require- 
ments to the system. 

“Once we get it to three or 
four carriers, we start to pilot 
with other agents,” he said. 
“Right now, we have 35 good- 
size agencies interested in 
using this platform.” Though 
the e-commerce initiatives get 
the most attention, it’s the im- 

e = provements in the back-office 
4 e IC ; processes that are driving the 
industry to the Internet. 

“Everyone focuses on the 

sexy sites, the graphics, the 
portals,” said Scott Alexander, 
AIG’s chief e-business officer. 
“But below the water line are 
the operational efficiencies, in- 
creased data quality and trans- 
fer, multiple system connectiv- 
ity. ... That’s where the oppor- 
tunity to really affect the bot- 
tom line is.” D 


Powering Business Portals 


T. 877.739.5207 | www.verity.com 
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What's it like to work at. . . 
Marriott International 


tiqnal Ine (www r 
tional INC. (WWW 


Main location: B 


Tenure: Since 1998 

Number of IT employees: 
Number of employees (end 
users): 153,000, including 
6,000 salespeople, w 

Porro’s f ond u 

Major ST initiatives: A Peo 


ft Ir plementation 


ns and 
Jlobal net 
work infrastructure 
IT training for next year: 
“An overall initiative is to learr 


as possi 
Soft 
loyee reviews: “ 


ocess where man 


over lessons learned 
Career-path options: “W 
ave a program called Career 
Journey, and in that, employees 
can identify career paths they 
want to pursue within specific 
job families, such as operations 
technical services, application 
integration, business integra- 
tion, project management, sup- 
port or leadership.” 
Bonus programs: “We have 
different IT bonus programs 
at the management level and 
senior technologist level. Also, 
a director or manager can give 


well done 


Workday: Eight to nine hours 
on a typical "We have 24/7 
coverage, so there's always 
someone on hand. But we gen 
have a flexib 

d Marriott is very focused on 
balancing project 
personal needs.” 
Must people carry beep- 
ers? Cell phones? Yes: on 
call workers are on a pager ro 
tation. “There's a huge percent- 
age of employees who carry cell 


2s for personal 


Marriott has a discounted 
plan with a local carrier.” 

Kind of offices: 

“We're renovating al 

cubes compan 

grading the furniture, so right 
now, there's a mix of the older 
cubes and the new luxury 
cubes 

On-site amenities: A day 
care center, gym, gas station 
convenie 
and bank. “Marriott takes the 


1d Drings it 


nce store, dry cleaners 
hospitality culture 
nto the corporate office. All the 
on-site amenities are basically 
what you'd find in a hotel 
In-house cafeteria/food 
service: Yes; features a salad 
bar, a deli, a grill and rotating 
daily yns that serve ethnic 
food such as Italian, Greek 

Thai, Mexican an 

Little perks: H 

an annual summer picnic and 
“one of the best holiday parties 
I've ever come across. They go 
all out. We take over one of the 
local hotel: 
and food galore 

Last companywide/depart- 
ment perk: Associate Apprec 
ation Week, a companywide 
event capped off by a big picnic 


1 historic 


3, have live bands 


with a live band an 
theme that hearkens back to 
Marriott's roots as a hamburger 
stand in 1927 
Would employees feel com- 
fortable e-mailing J.W. 
(Bill) Marriott Jr., chair- 
man and CEQ? “You don't 
even need to e-mail him. When 
he eats here in the cafeteria, he 
stands in line like everyone else, 
and you can go right up to him.” 
- Leslie Goff 
(/goff@ix.netcom.com) 
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Wireless productivity 


HE PC SNUCK UP ON US. It was a full decade after the 
Apple II’s debut before IT embedded the PC in its oper- 
ations and business in its thinking. Similarly, the Inter- 
net was around for more than a decade before it, too, 
snuck into IT and business awareness. 


Wireless won't sneak up. Soon, just about 
every innovation in Internet use will be wireless- 
centered. Early initiatives such as WAP phones 
and PDA add-ons may be limited, clumsy and 
slow, but with third-generation (3G) broadband 
coming by 2002, plus global telecommunications 
megamergers, the wireless message is being 
shouted from the rooftops to the basements. 

But it’s the wrong message for business. It’s 
a consumer message about how to create de- 
mand for services that will soak up the massive 
supply of new wireless devices, chiefly the In- 
ternet-enabled phone. 

There’s another — and better 
message: 

@ As with the Web, the early wire- 
less buzz has been about the con- 
sumer market. But, as with the 
Web, it became apparent that the 
payoffs are in the B2B arena. 

gw IT already has most of the tools 
needed for business use of wire- 
less. They can be a natural exten 
sion of existing core standards 
and platform architecture, most 
notably Windows and Ethernet, 
that robust and long-established 
base for LANs. 

This is news that’s being ob- 
scured by the mass-market frenzy. 
The initiatives involve bets on un- 
proven standards, reliance on the 
telecom industry to deliver on its 
broadband promises and a search 
for the as-yet-unknown killer app. 

The wireless Ethernet, based on 
the 802.1lb networking specifica- 
tion, doesn’t involve any of those. 
It’s easy to install. Just in the past 
month, I’ve seen many high 
schools, small companies, universi- 
ties and medical centers imple- 
ment it quietly, simply and inex- 
pensively. They saved money and 
added organizational mobility with 
minimal added complexity in IT operations. 

For me, perhaps, the most important current 
component of the integration of wireless into 
the enterprise platform is the wearable comput- 
er. I recently started to use Xybernaut’s Mobile 
Assistant, a full-function PC with a decent dis- 
play that I can wear on my wrist and use as a 
touch screen. It comes with a wearable small 


Soon, Just 
about every 
innovation 
in Internet 
use will be 
wireless- 
centered. 


keyboard or a full-size keyboard. The headset 
for dictation has a neat, small, mirrorlike add- 
on that displays the screen a few inches above 
my eye. Add a full-port replicator and access 

to all pocket radio, cellular and satellite com- 
munications, and here’s why I see 802.11b and 

a Xybernaut/802.llb-enabled laptop as IT’s cur- 
rent message about wireless: 

@ The main immediate payoff from wireless will 
come from productivity gains, especially in pro- 
viding workers out in the field with full-func- 
tion computing and communications. It may be 
years before consumer use of 
wireless Internet tools takes off. 
Grab the productivity now. 

@ The enterprise can use IT effec- 
tively only if all the access tools 
— from pocket to briefcase to 
desktop — are consistent in func- 
tions, standards, applications and 
interfaces. Build the platform, 
then extend the application. With- 
out a platform standard and strat- 
egy now, enterprise wireless will 
be a game of guesswork for years. 
Given how truly dreadful even ba- 
sic cell phone service is in the 
U.S., and the decadelong delay be- 
tween development and large- 
scale rollout of DSL, it’s almost 
certain that the path to wireless 
will be strewn with rocks. So bet 
on the proven platform base of 
Ethernet and Windows. 

Ethernet and Windows will 
make today’s mass-market WAP 
tools and 3G secondary to busi- 
nesses in exploiting wireless tech- 
nology for enterprise opportunity. 
Satellite transmission will add 
wide-area data communication 
capability. At some point, newer 
technologies, including 3G, will 
usher in the wireless revolution. 

But why wait? IT can only be a 
bystander in the wireless-for-the-masses game, 
yet it can and should be the leader in the wire- 
less-for-enterprise-productivity game. D 


Keen is chairman of Keen Education, as well as 
an author and consultant. His Web site is www. 
peterkeen.com, and he can be reached at peter 
@peterkeen.com. 





es e-business. 


The great e-business shakeout is well under way. For 
those who didn’t make it, our condolences. At least the 
end was quick. 


For those who have made it, who broke the code and 
figured out how to build a truly viable e-business, our 
heartiest congratulations 


As it turns out, many of these successful 
companies-—including the majority of the Fortune 
e-50-have built their e-businesses on an 
exceptionally strong foundation. 


The BEA WebLogic” E-Business Platform 


This award-winning set of innovative software and 
services is uniquely designed to help businesses 
rapidly develop and launch advanced e-commerce 
initiatives. It’s an end-to-end solution that includes 
rich personalization and complete B2B integration 
In fact, it’s now the global standard by which all 
e-commerce software is measured. 


Which explains why it’s BEA’s market-leading platform 
that powers Chase Manhattan, FedEx, Amazon.com, 
United Airlines, Wells Fargo, EX TRADE and over 6,500 
other successful e-businesses. Find out how we can 
help yours. Visit us at www.bea.com. 
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Newly appointed overseers of 
data privacy must work with 
I'l; but they may lack real 
authority. By Kim S. Nash 


HE SUDDEN interest in appoint- 
ing chief privacy officers (CPO) 
stems as much from fear as it 
does from the desire to protect 
customers. 

The CPO movement is young [Page 
One, Sept. 18]: About 50 to 75 compa- 
nies have created such positions in the 
past several months, according to Alan 
Westin, a business privacy expert who 
in July started the Association of Cor- 


at rAe eee eva Re Scr 
iam mel en MSI Meus Cele) 
to balance privacy and profit 


porate Privacy Officers (ACPO) in 
Hackensack, N.J. 

Many more CPOs are expected to be 
hired as a result of the growing corpo- 
rate angst over whether Congress will 
pass strict privacy laws that may ham- 
per business. The Federal Trade Com- 
mission (FTC) has already suggested 
that corporate self-regulation isn’t 
working [Business, June 19]. 

But having a CPO is fast becoming a 
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That’s because Captus Networks detects and adaptively Captus Networks integrates routing, adaptive firewalling, 
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But having a CPO is fast becoming a 
checklist item to help companies ward 
off government regulation and to re- 
assure customers that their privacy 
will be protected, says Jonathan Gaw, 
an analyst at International Data Corp. 
in San Mateo, Calif. 

Often, a CPO is at a disadvantage 
from the start, Gaw says. “Companies 
are about making money,” he says. “But 
CPOs don’t have a budget. They are not 
responsible for profit and loss. They 
generally don’t have large staffs rela- 
tive to the rest of the company, and, of 
course, they don’t bring in any revenue.” 

In general, no standard chain of 
command involving the CPO exists 
yet. At some companies, the CPO re- 
ports to the director of compliance; at 
others, he reports to the CEO. CPOs 
are former lawyers, marketing people 
and compliance officers. They may or 
may not have an informa- 
tion technology back- 
ground, although experts 
say having an understand- 
ing of IT is key. 

The job description 
varies, but, according to the ACPO, 
general duties include the following: 
® Training employees about privacy. 
= Comparing the company’s privacy 
policies with potential risks and then 
figuring out whether or not and how to 
fill gaps. 
= Managing a customer-privacy dispute 
and verification process. 

# Informing senior executives on how 
the company deals with privacy issues. 
Sometimes a CPO is named after a 
bad privacy incident threatens sales 

and profits. 

For example, Minneapolis-based U.S. 
Bancorp, an $86 billion bank, appoint- 
ed a CPO in August after spending $3 
million to settle a lawsuit that accused 
the bank of selling confidential custo- 
mer financial data to telemarketers. 
CPO Patricia Bauer reports to the 
president and chief operating officer. 

DoubleClick Inc., an online advertis- 
ing firm in New York, brought in a 
CPO after the FTC and several states 
started to investigate its data-sharing 
practices last winter. People had com- 
plained about DoubleClick’s tracking 
of individual Web users by name and 
then matching the information to a 
marketing profile database. The com- 
pany has since stepped back from that 
plan. DoubleClick appointed the CPO 
to oversee and educate the public 
about its privacy policies, the company 
said in a statement. 

What separates a forceful CPO from 
a figurehead is whether that person 
can change or stop a marketing or IT 
project when privacy questions arise. 

At AT&T Corp., for example, Mike 
Lamb, who was appointed CPO in June, 
recently had a hand in nixing a deal with 
a large consumer retail company to 


MEET THE CPO at 
CompuCredit Corp. 
in Atlanta. See Job 

Watch, PAGE 127 
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market AT&T’s long-distance service. 

The retailer insisted that it get full 
access to AT&T customer data, Lamb 
says. But that would have violated the 
phone company’s vow to keep such 
information confidential unless the 
customer OK’s its release. 

“TI got directly involved in the con- 
versations [with the retailer]. I rein 
forced in the context of those negotia- 
tions that our commitment to privacy 
was nonnegotiable,” Lamb says. 

Sally Cowan, CPO at New York-basex 
American Express Co., participated in 
the recent creation of single-use credit- 
card numbers for online shopping, a 
company spokeswoman says. At every 
step — from customer focus groups to 
development and implementation - 
Cowan made sure Amex’s privacy poli- 


cies explained how the so-called Private 


Payments service took shape before it 
was launched in September. 

One warning sign that a 
CPO may be ineffective is 
when he has other job titles 
and responsibilities, says 
Jim Grady, an analyst at 
Giga Information Group 
Inc. in Cambridge, Mass. 

When that happens, the CPO will 
likely be too busy to keep up with all 


the business, political and technical as- 


pects of the privacy issue, Grady says. 
Pat Carmody is a multitasking CPO 
at Mutual of Omaha Insurance Co. A 
lawyer by training, Carmody was ap- 
pointed to lead privacy efforts four 
months ago. As CPO, he’s overseeing a 


Warding 


The CPO’s job is a 
combination of 
50,000 feet and 

down in the dirt. 


SHELLEY HARMS, EXECUTIVE 
DIRECTOR OF PRIVACY, 
VERIZON COMMUNICATIONS 


companywide audit of data flows to 
determine what happens to customer 
information as it moves through the 
Omaha-based insurer. 

Yet Carmody’s actual title is vice 
president of insurance department 
services. He’s also in charge of making 
sure the insurer’s many forms and rate 
structures comply with state and fed- 
eral laws. But he maintains that despite 
his multiple roles, privacy is “an im 
portant mission” for the insurer. He 
plans to have three people working for 
him on privacy issues by year’s end. 

Still, a better strategy is to keep the 
CPO free of other duties, Grady says. 
“There’s a new wrinkle to privacy 
every day. If you’re responsible for sev- 
eral other areas, it’ll be quite difficult 
to do the privacy part of the job well,” 
he says 

The relationship between the CPO 


Off 


Washington? 


CORPORATE AMERICA is desperate to 
convince the public that it can be trusted 
with private consumer information 

Otherwise, pundits say, Congress will 
likely enact privacy laws that will force 
many businesses to change the way 
they handle data. Several such bills are 
pending and are expected to be debated 
next year. 

The appointment of CPOs is just one 
small move companies are taking. And 
smallis the operative word, says Jona- 
than Gaw, an analyst at IDC. 

“In an organization where everybody is 
focused on making money, you need 
someone to wave the consumer flag. 
CPOs are necessary in that regard, but 
{they’re] not enough,” Gaw says. 

Other recent corporate steps to estab- 


lish and maintain consumer trust include 
= The ACPO (www.pandab.org). a profes- 
sional group for CPOs, was created in July 
a Nine of the biggest online advertising 
firms signed a deal with the federal gov- 
ernment in August to limit the kind of in- 
formation they collect from Web surfers 
without the users’ consent 
In June, 24 companies and trade 
associations formed the Privacy Leader- 
ship Initiative, an alliance to study con- 
sumer privacy issues and lay out voluntary 
guidelines. The group announced last 
month that it will work with the New York- 
based Direct Marketing Association on a 
three-year, multimillion-dollar publicity 
blitz to convince consumers that their 
data is safe. 

- Kim S. Nash 
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Not only 


must a CPO understand IT security, 


and the IT group is critical 


but he should also be well-inform 
about how the IT group treats custo 
mer data as 


it pulses through the com 


pany s systems. 


Proactive or Reactive? 
Even when they go to the tr 

of naming a CPO, not all companies 

insert that executive into IT processes 

Often, for example, IT people aren’t 

required to meet with the CPO wher 


applications are being designed 
Rather, the CPO is « 
after privacy questions surface 
some experts critic ize this ap 
saying it’s easier and cheaper to fix 
potential problems early in a project 
rather than afterward 
Shelley Harms, executive dir 
of privacy at New York-based V 
Communications, says that alt 
she isn’t a checklist item on t 
group’s agenda during new projects 
she regularly talks with technology 
each bi 


managers in isiness unlt 


if a crisis comes up, we have that r 
tionship,” she says 

That's just what happened t 
mer, when a form on Verizon’s 
site that lets customers place 
orders inadvertently exposed accoun 
information. When Verizon found out 
about it, IT shut down the application 
to fix it while Harms offered advice 
how to route the account information 
so it wouldn't be revealed online. She 
also worked with IT on a postmortem 
study of what went wrong and how to 
avoid making the same mistakes in the 
future. But « 
formal privacy policy, employees may 
disagree about how to interpret it 
That’s when the CPO must referee 


ven when a company nas a 


Harms recently mediated when in- 
ternal marketing staffers questioned 
which Verizon pledge should take 
precedence: the company *s vow to 
honor customer requests not fo re 
ceive marketing mailings or a promise 
to give customers better alternatives to 
their current long-distance programs 
“We debated, and we decided that 
telling somebody that his service has 
become cheaper or that tweaking it in 
this manner will make it cheaper isn’t 
a solicitation,” Harms says. 

Overall, she says, she must consider 
philosophical issues about how to pro- 
tect customer privacy while the com 
pany earns a profit. But she also has to 
dig into technology issues such as how 
best to combine Verizon’s various “do 
not call” customer opt-out lists into a 
single Oracle Corp. database 

“The CPO’s job,” she says, “is a 
combination of 50,000 feet and down 
in the dirt.” D 
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BEWARE 


OF PRIVAGY TRAPS 


You can learn valuable lessons from three recent 
online privacy controversies. By Ann Harrison 


OES YOUR organization 
want to create responsible 
electronic privacy policies 
and to know when to an- 
ticipate controversy? You 
may want to pay close attention when 
other businesses are accused of mis- 
handling consumer data. Three recent 
cases offer useful lessons about the 
ypes of products and services that at- 
tract criticism from privacy activists. 


Be Careful With 

Unique ID Numbers 
This summer, Digital:Convergence 
Corp. in Dallas was criticized for its use 
of a unique identification number em- 
bedded in hundreds of thousands of 
free :CueCat bar-code scanners shipped 
by the company and its partners. 

The scanner, promoted as an easy 
way for consumers to visit Web sites by 
scanning printed bar codes, was re- 
vealed to contain a tracking feature cre- 
ated by the unique ID number. The 
tracking feature sent information back 
to the company. Digital:Convergence 
acknowledged the existence of the ID 
number but said its database breaks the 
connection between the ID number 
and personal data. 

Privacy advocates argued that 

See Privacy Traps, page 70 
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Everyone should 
have the right to tell 
a company or the 
company’s receiver 
to destroy their data, 
and there should be 
a legal requirement 
to comply. 


JASON CATLETT, EXECUTIVE DIRECTOR, 
JUNKBUSTERS CORP. 
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BEWARE 


OF PRIVACY TRAPS 


Continued from page 68 

:CueCat’s tracking ability wasn’t dis 
closed in the company’s privacy policy, 
which also didn’t indicate what the 
company does with the collected infor 
mation. To make matters worse, an at 
tacker broke into one of Digital:Con 
vergence’s Web servers and gained ac 
cess to the registration information of 
some 146,000 users, then posted some 
of that information on the Internet. The 
company is now sending out notifica 
tion of patent infringement letters to 
developers who are producing alter 
nate versions of the :CueCat software 
without the ID number. 

The Denver-based Privacy Foundation 
sought the following remedies from Digi 
tal:Convergence: Modify the software to 
remove the potential for tracking, pro- 
vide a patch that disables the ID number 
for current users and notify users of the 
patch and the product’s tracking poten- 
tial. The foundation also suggested that 
future shipments of :CueCat have the 
user ID number disabled and disclose 


what information is collected through the 


device and how it will be used. 

Doug Davis, chief technology officer 
at Digital:Convergence, says the com 
pany won't comply with these requests 
and has done an adequate job of disclo 
sure. “There has been a lot of smoke 
and fire around privacy issues because 
we don’t do what we could do,” he says. 
“We are all about disclosing what we do 


and being extremely honest about that.” 


Davis says eliminating the ID num- 
ber would seriously undermine the 
company’s business model. Although 
he couldn’t disclose what the company 
eventually plans to do with the infor- 
mation, he noted that it could permit 
end-to-end identity verification for 
Web transactions. 

Davis’ advice for other companies 
that wish to follow good privacy poli- 
cies: “Be scrupulously honest about 
what you are doing, and be prepared to 
back that up.” 


~) Don’t Offer Customer 
< Data in a Fire Sale 
Waltham, Mass.-based Toysmart.com 
Inc. caused an uproar recently when it 
tried to sell its customer data in bank- 


ruptcy proceedings. Although Toys- 
mart had assured customers that their 
information would stay private, it re 


portedly put up for sale 250,000 names, 


addresses, billing information, credit- 
card numbers, shopping-behavior in 
formation and family profiles. 

The Federal Trade Commission 
(FTC) and 39 states sued. The FTC ap- 
proved a settlement allowing Toysmart 
to sell the information to a buyer who 
would agree to its privacy promises, 
but a federal bankruptcy judge rejected 
the agreement. 

Jason Catlett, executive director of 
the privacy advocate group Junkbusters 
Corp. in Green Brook, N_]J., argues that 
in such a case, consumers should have 
been given an “opt-in” agreement that 
requires their consent, because they 
may have their information sold against 
their wishes if their e-mail addresses 
aren't valid. 

“Everyone should have the right to 
tell acompany or the company’s receiv- 
er to destroy their data, and there 
should be a legal requirement to com 
ply,” says Catlett, who supports a com- 
prehensive federal privacy law that pre- 
vents personal or transaction data col- 
lected for one purpose to be used for 


another without consent. 


2 Don’t Weaken 
— Privacy Policies 
Privacy advocates were aghast when 
Seattle-based Amazon.com Inc. an- 
nounced in September that it was re- 
moving an option in its privacy policy 
that let customers tell Amazon to nev- 
er sell or share personal information. 
While Amazon says it doesn’t engage 
in this practice, the company acknowl- 
edged that it may opt to release this in- 
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formation in the future. If Amazon goes 
bankrupt or sells part or all of the com- 
pany, it says it will sell all personal in- 
formation it has collected. The compa- 
ny also revealed that it buys informa- 
tion about its customers from other 
sources and adds the data to its profiles, 
but it doesn’t let people see the infor- 
mation it keeps about them. 

Despite past statements on Amazon's 
Web site that “we do not now sell or rent 
our list of customers to anyone,” Ama- 
zon spokesman Bill Curry told the IDG 
News Service in September that the 
company never guaranteed that it would 
forever ban the sale of customer data. 

Amazon spokeswoman Patty Smith 
even claimed that the new policy is 
“stricter” because it spells out the con- 
ditions under which personal informa- 
tion can be transferred. 

But privacy activists note that under 
the old policy, customers at least had 
the option of never having their infor- 
mation sold. Under the new policy, they 
don’t have that option. Simply being 
more explicit about a bad and change- 
able policy isn’t an improvement, ac- 
cording to Catlett. 

Andrew Shen, a policy analyst at the 
Washington-based Electronic Privacy 
Information Center, says changing pri- 
vacy policies will seriously erode cus- 
tomer trust. 

“Consumers just want a clear answer 
about what will be done with the data 
— stay away from vague provisions,” 
Shen says. “All companies should be 
expected to stick to their policies at 
all times.” D 


Harrison is a former Computerworld 
reporter. She is now a San Francisco- 
based freelance writer. 
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(OU FEELING LUCKY TODAY? Feeling like 

you want to break out of the box and 

buy some software or a service from 

a new company that seems to have a 

great idea, but no proven track 
record? You know, take a risk? 

Well, hold that thought. And read on. 

In the following pages, you'll read sage advice 
from your colleagues who have gambled on an 
emerging company. Most say they did take risks, 
but they liked the rewards. These early users say 
start-ups often will change their software to meet 
customer needs and will make doubly sure secur- 
ity holes are plugged before they ship their prod- 
ucts. A bigger company isn’t always a better com- 
pany, they say. Start-ups move light and fast and 
can keep pace with a changing business landscape, 
these customers say. 

They also say, You’re putting your business in 
their hands. 

You’re not just choosing a vendor, you’re choos- 
ing a business partner. So it’s not enough to have 
the courage to take the risk. You need to test the 
waters, really test the waters, first. In other words, 
how do you reduce the risk? Your fellow IT 
managers offer this advice: Do what the venture 
capitalists do and follow the money. Look for solid 
investors and strategic pariners. Interview past 
customers. Tie payments to accomplished goals. 

Computerworld’s Emerging Companies to Watch 
in 2001 is our list of new companies we think are 
worth putting to the test. We’ve chosen our win- 
ners from 10 key technology areas. Computer- 
world’s editors reviewed the initial group of nomi- 
nees, and a panel of industry experts helped us 
narrow the list to the Top 100. No one has a crystal 
ball for these things, but these companies look like 
winners to us. 

At the very least, if you take a gamble on an 
emerging company, we hope the reward is worth 
the risk. 


Ellen Fanning 
Robert L. Mitchell 
Melissa Solomon 
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>» Separating hype from 
reality is key to picking an 
e-business vendor. 


By KATHLEEN MELYMUKA 


avid Scholtz recalls hearing 

about a start-up that had secured 

its first round of funding and 

selected an e-business vendor. 

The vendor proposed the right 
technologies, but it lacked experience in work- 
ing with them and lost precious time in trial 
and error. As a result, the start-up’s product 
was three months late. That bump delayed the 
second round of funding and shook investor 
confidence. Money began to dry up, and the 
start-up company eventually folded. 

“The vendor partner was learning along the 
way and making mistakes, and the company 
paid the price for it,” says Scholtz, CEO and 
founder of AllCharities.com Corp. in San Fran- 
cisco. Scholtz has fared better with his e-busi- 
ness vendors than the ill-fated start-up, but he 
knows the dangers. When you deal with an 
e-business vendor, he warns, “you’re putting 
your business in their hands.” 

New e-business vendors are popping up 
faster than mushrooms after a rain (the e-com- 
merce segment of our Emerging Companies 
list contains 18 of the hottest up-and-coming 
companies), and each promises to turn your 
company into an e-business player overnight. 


But while some can improve the health of your 
' eS ee eso ; 


company, others are poison. How can you tell “We had a short-term need to get ¥ 
2 peice = be our Web site up and running, but 7 
the portobellos from the toadstools in this a STARR ps 


strange new world? SUC ORU 
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THE RIGHT PERSPECTIVE 
First of all, you need the right 
perspective, says Tom Bugnitz 
managing director of The 
e-Business Forum and president 
of consulting firm The Beta 
Group, both in St. Louis. “People 
say, ‘How do I make my business 
an e-business?’ not, ‘What is it 
that I’m going to be doing for my 
customers in a couple years, and 
how will e-business enable 
that?’ ” he says. 

In addition to customer issues, 
you need to consider how much 
change and uncertainty your 
company can handle. You need 
to know whether you're going to 
be a benchmarker or an innova- 
tor. A benchmarker asks, “Who's 
good in my sector, and how can 
I copy them?” explains John Jor- 
dan, director for e-commerce 
research at Cap Gemini Ernst & 
Young in Cambridge, Mass. He 
favors the innovator mentality, 
which breaks from the pack. But 
that’s a hard road, he says, “be- 
cause you have to go someplace 
no one has been before.” 

Don’t make the mistake of 
thinking of e-business as an easy 
way out of problems with your 
supply chain or other corporate 
processes, says Jeff Hemmer, 
vice president of customer sup- 
ply chain at Lyondell Chemical 
Co. in Houston. Lyondell is com- 
pleting an e-business project 
with Houston-based ECOutlook.- 
com, one of Computerworld’s 
Emerging Companies winners, 
to improve connectivity and in- 
tegration with remote inventory 
locations. “Often, people look 
for vendors to fix their prob- 
lems, but they won't,” he says 
“If you have a fundamental prob- 
lem, you fix it first.” 

Having an e-business strategy 
is a long way from just putting 
up a Web site, says Philip Ander- 
son, director of the Glassmeyer 
McNamee Center for Digital 
Strategies at the Tuck School of 
Business at Dartmouth College 
in Hanover, N.H. “If you end up 
just webifying the current way 
you do business, you're better 
off doing nothing,” he says. In- 
stead, he explains, think about 
what you're really trying to ac- 
complish. 

Melanie Mason, vice president 


of marketing at CenterBeam Inc., 
a technology service provider in 
Santa Clara, Calif., considered 
how her company viewed its 
business in relation to the Inter- 
net, how its customers and 
prospects were using the Inter- 
net and what its Web site should 
do for customers. Then she took 
the conversation to key stake- 
holders throughout the company 
and built an e-business strategy 
with a short-term goal of creat- 
ing a number of internally and 
externally focused Web sites and 
a long-term goal of using them 
to establish and nurture custo- 
mer communities. 


KEEP IT SIMPLE 
Your strategy can be simple, says 
Anderson. But before you even 
begin to discuss your plans with 
vendors, you must know how 
your company will alter the 
dimensions of your industry in 
your favor in the next one to 
three years. You may, for exam- 
ple, plan to deliver a level of 
convenience the industry has 
never seen. You may plan to 
make it easier to do business 
than anyone else in the industry 
or take huge amounts of risk out 
of doing business in your space. 
Whatever your strategy, he says, 
“if you don’t have one, you're not 
ready to sit down with anybody.” 

View vendor selection as a 
business issue, not a technology 
issue, Bugnitz says. “You're not 
choosing a technology vendor,” 
he says. “You're choosing some- 
body who’s going to be imple- 
menting a very significant part 
of your business strategy.” 

To prepare for that, find a sys- 
tems integrator that can give you 


if you end 

up just 

webifying 
the current way 
you do business, 
you’re better off 
doing nothing. 


-PHILIP ANDERSON 
TUCK SCHOOL OF BUSINESS, 
DARTMOUTH COLLEGE 


nm Mirrors 


a crash course on the nuts and 
bolts of e-business, says Ander 
son. Then use the integrator as 
an adviser during your vendor 
selection. “You need a personal 
shopper v ho can walk you 
through the landscape, throt 
the alternatives, who knows 
who's credible as a company, 
Bugnitz says. “You want to be 
ible to say, ‘This sounds neat 
Who else can do that?’ ” 
Scholtz, who is working w 


e-business site developer 
Groundswell Inc. in San Francis 
co, also an Emerging Companies 
winner, adds that someone on 
your company’s team should 
ibsolutely” have experience on 


the venc ide of the business 


the questions to ¢ 


things to look for,” 


ASK QUESTIONS 
Ask prospective vendors 
traditional questions — look at 


their financials and interview 


r can support the 


specific technology it s propos 


I 
r 

ing and the scale of the project 
f 


Ask for commitments o 


t specific 
h 


people to work on the job, exam- 
ine their résumés and interview 
the key people, looking for | 
knowledge and a cultural fit 

Beyond that, Hemmer says 
look at how fast the vendor itself 
is retooling for new opportuni 
ties. “That shows their adapt- 
ability and flexibility,” he says 

Determine how well the cor 
porate cultures, strategies, work 
habits and relationships align. 
“Tt’s not about technology; it’s 
about business,” Hemmer says 
“This sounds touchy-feely, but 
these things are so hard to do. If 
you don’t have [compatibility] 
up front, you'll have a lot of 
problems.” 

Mason says some vendors 
have hidden agendas that can 
take on a life of their own as a 
project moves ahead. She sug 
gests that you look at previous 
work done by the vendor to see 
how the initial strategy compares 
with the product that was deliv- 
ered. To the extent that the two 
differ, the vendor may have been 
steering the project without the 
customer’s knowledge of it 
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Rick Ehrensaft, director of 
marketing at distribution ser 
vices firm Pentacon Inc. in 
Houston, was planning a com 
plex, Web-based, just-in-time 
product delivery system. He 
asked vendor candidates if they 
were prepared not just to build 
the project but also to imple 
ment it, handling pieces such as 
establishing supplier and cus 
tomer connections. “We didn’t 
want to be experts in this,” says 
Ehrensaft 

Bugnitz takes managi 
project a step further. “What's 
their commitment to helping me 
adjust after we get things up and 
running?” he says. “What are 
they going to do to hold my 
hand beyond the time we've im 

lemented? Can they really help 


sa 
t 
me take that next step?’ 


In fact, Anderson says, the 


best e-business vendors are will 
ing to be outsourcing partners 
“They will run it,” he says. “The 
vendors who can provide out 
sourced solutions are going to 
be the big winners among all 
these firms.” 


Don’t say, “Brief us on what 
your software does,” Anderson 
says. Instead, tell the vendor 
what you're attempting to do 
and then ask what’s the best way 
to accomplish it. Only then 
should you ask how the vendor’s 
software fits into the picture. 
“You can assume they all over 
promise and underdeliver,” says 
David Bergen, CIO at Car 
Station.com in San Francisco, 
who used a transitional e-busi 
ness vendor to get his business- 


to-business auto industry ex- 
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change on its feet while building 
his own Web development team 

To discern between hype and 
reality, Hemmer says he talks to 
as many people at as many levels 
of the vendor firm as he can. “] 
see if I'm getting the same an 
swers from everybody,” he says 

Hemmer says he sees a red 
flag if a vendor is slow to pro 
duce customers to talk to, and he 
balks at a proposal based on a 
solution that isn’t quite finished 

“Look carefully at that demo, 
and figure out if it’s smoke and 
mirrors or [if] it’s really there,” 
he advises. 

Scholtz says to take note if you 
don’t meet key project staff dur 
ing the sales pitch. “If the ven 
dor professes to have the ideal 
project lead to match your proj 
ect, then I would like to have 
that person involved in the early 
discussions,” he says. 

Anderson says you need an 
honest sense of where your 
company fits in the vendor's big 
picture and whether it can guar- 
antee who will be working with 
you. “It’s a mistake to think 
you're working with Firm X,” he 
says. “You're working with Peo- 
ple A, B and C.” 


LEAPING THE PITS 
Customers agree that e-business 
projects come with some unique 
pitfalls. One of the biggest is 
dueling agendas. “These [ven- 
dors] are not hurting for busi- 
ness, and they take you on be- 
cause of what you offer them,” 
says Mason. 

She found that her vendor was 
much more intrigued by her 
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long-term goal than her less sexy 
short-term priorities. “We had a 
short-term need to get our Web 
site up and running, but they re 
ally wanted to do what was cool 
to them,” she recalls. “There 
were hiccups in the beginning 
around this.” 

“The key is to understand 
what you really want to do and 
not get sucked into what they 
want to do,” says Lyondell’s 
Hemmer. “You have to lead 
them; don’t let them lead you.” 

Because so many e-commerce 
vendors are new businesses, 
you have to be convinced that 
your vendor will survive, says 
Hemmer. Even so, with the 
world changing at Internet 
speed, you don’t want to get into 
a long-term contract. “If they 
don’t evolve fast enough, they 
could be obsolete next year,” he 
explains. 

Keep your options open by 
making the initial term very 
short, he advises. Then renego 
tiate. “Even if I have to pay more 
up front, I'll sacrifice that for 
flexibility,” Hemmer says. 

Problems arise when the cus 
tomer abdicates responsibility 
because it’s easier to let the ven 
dor decide, Bugnitz says. Then, 
when the project is finished, it 
doesn’t look the way the user 
thought it would. 

Similarly, some customers 
allow a vendor to use technolo- 
gy that doesn’t align well with 
existing technology. “It can hap 
pen if you think of e-commerce 


as an isolated, separate piece,” 
Bugnitz says. 

In both cases, the mistake is in 
failing to realize that e-business 
is an integral part of the entire 


business. 


WORDS TO THE WISE 
Although working with and 
emerging e-commerce vendor 
brings a new set of challenges, 
there are areas where you can 
leverage the relationship. “For 
many younger companies, one 
big account legitimates them,” 
says Anderson. If your company 
is large enough to play the role 
of that key reference customer, 
“they will move heaven and 
earth to please you,” he explains. 

But if you’re a midsize compa- 
ny, he adds, all bets are off. “If 
there’s a crunch on a project for 
Boeing, you're not going to be in 
the front seat of the movie the- 
ater,” Anderson says. 

With that in mind, he agrees 
that modular projects with short 
deadlines are the way to go. “If 
you take on a big project of 
eight to 10 months’ duration, 
you're asking to be screwed,” 
he says. 

This strategy dovetails with 
what Mason says is the most im- 
portant lesson she has learned 
about e-business. 

“No one firm can do it all,” 
she says. “Some are good at one 
thing and some at another. You 
don’t want to force-fit them. Be 
smart about it, and use the com- 
panies for what they're best at.” 


Ten Questions to Answer Before 
Signing an E-Commerce Vendor 


Is your company a benchmarker or an innovator 


at heart? 


What are your customers’ needs and how will 
electronic business address them? 


What is your e-commerce strategy? 


Are people throughout the company ready to 
change the way they work to make your 
Web-based business a reality? 


Will the e-commerce venture be one large project 
or will you start small and build incrementally? 


Will you look for one vendor or several best-of- 


breed partners? 


Are you expecting an e-commerce vendor to fix 
problems with your business processes? 


By what criteria will you judge vendor candidates? 


Do you have a good enough feel for the nuts and 
bolts of online business to hold your own among 
vendors and not get lost in the complexity? 


Does your team include someone with a vendor 


background? 
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Now it’s time for an industry 
standard to manage them. 


Let's face it. You have to be on the leading edge of what has become 

known as e-business. But you cannot afford to lose sales, customers 

and brand reputation because of failed transactions. So your systems 
must be more than excellent. They must be failsafe. 


Relax. Tonic has arrived. 


Now you can feel comfortable about your company's dependence 
on web applications. Because the Tonic enterprise solution 
heralds a new era of web applications management. 


Load testing and integrity assessment before going live. And 
on-going monitoring of systems beyond anything previously 
offered by a single company. That's Tonic. 


Active within hours, not days. Easy to use with no retrofitting of 
your systems required. But with the scalability to simulate millions, 
not just thousands, of simultaneous users. After all, you plan to be that 
successful, right? 


Suddenly the leading edge is a much more comfortable place to be. 
www.tonic.com 
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>> As competition builds, a growing num- 
ber of online B2B marketplaces are scram- 


bling to survive by adding services that 
reduce the risk of anonymity. By JULIA KING 


sk Tom Ste 
phens, execu 
tive vice presi 


dent at Paschail 


Truck Lines 
Inc., about do 
ing business on Internet market 
places, and he'll tell you about 
the Los Angeles-to-Florida 
bound load that his firm never 
got paid for hauling. 
The $132 million Murray, Ky 


based transport company “won” 


the new business on Netfreight 
com, a now-defunct electronic 
marketplace whose Web site 
matched shippers with lowest 
bid carriers 

“We picked up the load, deliv 
ered it and we billed the custo 


mer that Netfreight said to bill,” 


Stephens recalls. “But the cus 


tomer said the bill wasn’t theirs.” 


To resolve the problem, 
Paschall went back to the mar- 
ketplace, but Netfreight was 
out of business, and he was out 
several thousand dollars. 

“It’s a headache not knowing 
who the customer really is,” 


Stephens says. Still, he adds, the 
Netfreight encounter hasn't 
soured him on online market 
places. 

“We'll do it again, but we'll 
become much more selective 
about who we deal with,” he says 

Paschall’s experience goes 
straight to the Achilles’ heel of 
online marketplaces — the ab 
sence of trust 

It’s true that electronic mat 
ketplaces provide a fast, inex- 
pensive and relatively easy way 
to introduce buyers to a whole 
new universe of suppliers, and 
vice versa. But in most cases, 
there’s no guarantee those new 
found contacts will make for 
good business partners who will 
deliver quality goods or pay 
their bills on time. 

lhat’s one of the factors dri 
ving the proliferation of private 
digital exchanges, which elec- 
tronically link a deliberately re 
duced number of key suppliers. 
Gartner Group Inc. in Stamford, 
Conn., estimates that some 
30,000 private exchanges are in 
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various stages of development, 
compared with some 600 public 
exchanges. 

But several of Computerworld’s 
Emerging Companies are intro 
ducing technology aimed at 
addressing security concerns 
and providing services to lure 
buyers to public marketplaces. 

‘To bring real value in an elec- 
tronic marketplace, you have to 
offer more than just a place to 
shop,” says Marty Gruhn, an ana 
lyst at Summit Strategies Inc. in 
Boston. “The future for market 
places will be offering services 
customers will pay for — things 
like escrow services, currency 
translation, credit and logistics 
services. The marketplace busi- 
ness isn’t a transactions busi- 


ness. It’s a services business.” 


SOPHISTICATED 

SERVICES 

Increasingly, public market- 
places seem to be heeding that 
message, adding services ranging 
from identity and credit verifica- 
tions to field inspection of goods 


bought and sold sight unseen at 
electronic marketplaces. 

Consider RetailExchange.com, 
a Boston-based electronic mar- 
ketplace that links manufactur- 
ers and retailers. The exchange 
prequalifies buyers and sellers 
then matches them, but not via 
the traditional auction method. 
Instead, RetailExchange.com 
provides negotiation and chan- 
nel management services that, 
among other things, establish up 
front the identity and creditwor- 
thiness of all parties. 

For example, manufacturers 
can use the channel manage- 
ment service to stipulate which 
retailers to include in online ne 
gotiations for particular goods. 

“The last thing a Tommy Hil- 
figer, which is selling their fall 
line through department stores, 
wants to see is the excess from 
the same line showing up two 
blocks away at a discount loft, 
so we have features to control 
their channels,” explains Melissa 
Webster, vice president of stra- 
tegic partnerships at Retail- 
Exchange.com. “It’s critical to 
our value proposition — espe- 
cially to sellers — to identify our 
members.” 

RetailExchange.com, which 
has 4,500 members and has trad- 
ed about $20 million in goods 
since its launch in February, also 
offers credit protection to sellers 
through a partnership with New 
York-based CIT Commercial 
Services Group Inc. For an extra 





ho 


an You 
rust’? 


fee, CIT essentially buys a sell- 
er’s accounts receivables, guar- 
anteeing to pay the seller if an 
online buyer doesn’t pay up. 

Round Rock, Texas-based Dell 
Computer Corp.’s newly 
launched electronic market- 
place, Dellmarketplace.com, 
goes a step beyond identifying 
buyers. It uses software embed 
ded in the Dell marketplace to 
let suppliers differentiate how 
they market and sell their prod- 
ucts to various buyers. The soft- 
ware is from Austin, Texas-based 
Exterprise [nc., an Emerging 
Companies winner. 

For example, an electronics 
supplier selling projectors on the 
exchange might feature product 
benefits such as “lightweight” 
and “high image quality” for a 
less-sophisticated buyer but 
display all of the technical speci- 
fications for a buyer who identi- 
fies himself as an engineer. 

In addition to the market seg- 
mentation service, Dell plans to 
incorporate credit scoring and 
finance services into the market- 
place. It will also offer systems 
integration services, such as 
helping suppliers create elec 
tronic catalogs. Eventually it will 
link regular trading partners’ 
internal enterprise systems 
through the Dell marketplace. 

“We believe the next phase 
will be interconnected business 
networks connecting internal 
processes within a business to 
each other — such as connecting 


the finance organization of one 
company to another’s to do 
accounts payable and accounts 
receivable processing,” says John 
Hampton, Dell’s director of new 
ventures. “Our intention is to 
collaborate.” 

Until recently, collaborative 


commerce has been little more 


itt 
than a buzzword on the busi 


ness-to-business conference 
circuit. But now a handful of 
Internet market makers are be 


ginning to deliver on the promise 


of linking multiple businesses 
and processes through a central 
marketplace to do more than 
buy and sell. 

Among these is San Francisco 
based Bid.com Inc., which oper 
ates an electronic marketplace 
for companies in the building, 
engineering and real estate in- 
dustries. The various companies 
use the marketplace’s collabo- 
rative tools and services to elec 
tronically manage large, com 
mercial construction projects 
and to buy and sell materials 
and services. 

San Francisco’s Orchard Hotel 
is one of the exchange’s more 
visible success stories. The 
building project, which came in 
two months ahead of schedule 
and earned the hotel an addi- 
tional $1 million in revenue by 
opening early, was managed 
entirely on Bid.com, with con- 
tractors, project managers, sup- 
pliers, engineers and architects 
exchanging plans and work 


orders, buying materials and 
scheduling deliveries on the 
electronic exchange 
‘The building industry is a 

ighly fragmented one, with lots 
of islands of technology,” says 
Bid.com Chairman Daryl Mag 
na. What Bid.com does is inte- 
grate those systems into a single 
Web-based platform, which Ma- 
gana says can cut between 5 

ind 10% from project costs that 
run in the hundreds of millions 


of dollars 


MARKETPLACE 
MIDDLEMEN 

But even as marketplaces add 
collaborative features and other 
services, it remains to be seen 
vhich will survive the shakeout 
that analysts predict will occur 
within the next two years. 

According to Forrester 
Research Inc. in Cambridge, 
Mass., companies that use ex- 
changes now trade about $19 
million in goods and services on 
one to two online exchanges. But 
by the end of next year, the aver 
age company will trade about 
$49 million in goods over four 
exchanges. 

One of the big issues for both 
buyers and sellers is how to 
choose from among the hun- 
dreds of electronic marketplaces 
springing up each month. 

Users and analysts agree that 
nearly all companies will likely 
do business at multiple market- 
places, which means integrating 
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their internal enterprise systems 
to several different exchanges 
using different technologies 
data formats and protocols 

“We have 55,000 SKUs in our 
store, and those f 
viced by any on 
Rolando deAgui 


e-commerce ¢ 


three or four \ 

changes that 

and do most of the [ 
integration work. You'll 
gravitating toward th 


wcome 


er to surv 


integratec 


to a marketplace 


limited marketplace functional 
ity and participation. But by 2005, 
more than 500,000 companies 
will participate in marketplaces 
as buyers or sellers or both, he 
says. 

But which marketplaces those 
will be remains very much up 
in the air, as the ever-expanding 
number of industry consortia 
exchanges, new dot-com players 
and integration marketplaces 
continue to jostle for position 

“We are 10 minutes into a 24 
hour poker game,” says noted 
industry observer Jim Champy, 
a regularly featured Computer- 
world columnist. “It’s far too 
early in the game to determine 
the winners and losers.” 
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ow can IT 
management, 
charged with 
choosing and 
deploying new 
technologies, 
make meaningful decisions 
about working with a start-up? 
One way is to look at what early 
investors — venture capitalists 
are looking for. 
Computerworld spoke with 
nearly a dozen venture capital 
firms for this story. Each had 
slightly different priorities, but 
all focused on three things: 


products, people and potential 


IT’S IN THE PRODUCT 

‘If I was a CIO making an early 
bet, I would, of course, look at 
the product,” says Promod 
Haque, a general partner at Nor 
west Venture Partners. Norwest, 
with offices in Boston and Palo 
Alto, Calif., is a backer of Yipes 
Communications Inc., an optical 
network service provider in San 
Francisco and a Computerworld 
Emerging Companies winner. 

“I would need to see people 
who are sold on the product 
before I would even consider it, 
Haque says. And because any 
company whose product gets 
adopted becomes an integral 
part of the business, “ 
ing for companies that have 
sticking power, and that means 
top management.” 

John E. Zeisler, head of Los 
Altos Hills, Calif.-based venture 
company Group Z, says, “You've 
got to make sure that the compa 
nies you do business with have 
solid investors as well as some 
strategic partners. That adds 
credibility. VCs are not doing 
this out of love, you know. Nei 
ther should a CIO.” 

In the case of Yipes, which 
offers a service to boost the 
amount of data that can travel 
on a network, Norwest asked 
complementary vendors that it 
invests in for assistance. “Be 
cause we invest in companies 
that both make equipment and 
deploy that equipment ... we 
are able to see what both sides 
need,” Haque says. That strategy 

asking partners that work with 
a Start-up to help assess the firm 

could benefit information 
technology managers as well. 

Duncan McCallum, a general 
partner at Cambridge, Mass 
based OneLiberty Ventures 
which invests in storage server 
software vendor and Emerging 
Companies winner DataCore 
Software Corp. in Fort Laud 
erdale, Fla., says he looks for 
management that has vision and 
is solving a big problem for cus 
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>»> As the first investors in an 


emerging company, venture 
capitalists scrutinize every 
aspect of a firm before spend- 
ing a dime. Here’s what VC 


re 


irms look for when placing 


their bets. By PIMM Fox 


tomers. “When you're looking at 
big opportunities, you want two 
things: customer pain and dis 
continuity,” he says. “Because of 
the proliferation of e-mail, the 
Internet and data warehousing, 
the people who are managing 
storage are overwhelmed. 


rhere’s great demand to manage 


these networks. There's big pain.” 


Some companies in market 
sectors that were hot a year ago 
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may have trouble finding inves 
tors today. “Wireless is the land 
rush right now,” says David Scott 
Carlick, a managing director at 
San Bruno, Calif.-based Vantage- 
Point Partners. “More and more 
people are going to use cell 
phones to access services, and 
the carriers [are] looking for 
useful applications and compel- 
ling wireless uses.” 

“The venture business goes in 


cycles,” says Todd Brooks, a 
general partner at Menlo Park, 
Calif.-based Mayfield Fund. 
“About four or five years ago, 
a lot of money went into unclog- 
ging the carrier bottlenecks. 
Today, we're seeing the trend of 
outsourcing critical components 
of a business for a bunch of rea- 
sons: Corporations can’t deploy 
IT professionals fast enough, the 
cost of transporting data is so 
cheap that there’s no reason for 
companies to host their [enter- 
prise resource planning] applica- 
tions and it is too complex for a 
firm to run its own applications.” 
Indeed, Emerging Companies 
winner Interliant Inc., a Pur- 
chase, N.Y.-based provider of 
managed application hosting, 
messaging, enhanced Internet 
and consulting services, is trying 
to capitalize on that trend to 
move even critical business 
components to outside vendors. 


BETTING ON OUTSOURCING 
Venture capitalists are making 
big bets on outsourcing — some 
that won't pay off for venture 
capital firms or IT management. 
“Sure, in the case of managed 
storage, for example, you have to 
ask yourself, ‘Is this something 
that already competes with en- 
trenched players such as EMC?’ 
because most venture people 
want to look at potentially billion- 
dollar companies,” says Brooks. 
“After all, the cost of getting to 
profitability can be $100 million.” 

Another area for outsourcing 
is training. “Because of the usage 
and complexity of PCs and other 
network-connected devices, 
educating the user is a critical 
function,” says Brian Frank, a 
principal at the W. R. Hambrecht 
venture group in San Francisco, 
which invested $6 million in 
Emerging Companies winner 
Service9ll.com Inc. in Dallas. 
Service9ll.com, which offers 
online technical support, is also 
backed by question-and-answer 
giant Ask Jeeves Inc. in Emery- 
ville, Calif. 

Che venture capital commu- 
nity is still licking its wounds 
while trying to distance itself 
from the debacle of business-to- 
consumer Internet investments. 
But these firms still know how 
to pick winners. The watch- 
words are great management 
(which includes experience), 
great technology that isn’t just 
an add-on to an existing product 
line and the potential to grab a 
significant share of an explosive 
market. The lesson for IT man- 
agement may be that, in the end, 
there’s one sure way to find the 
winners: Follow the money. ? 








B2B. Go forward with ease. 


Breakthrough technology enables B2B sooner, 
for dramatically lower costs. Now you can design a 
B2B solution in as little as three days, have your prototype 
operational in three weeks, conduct more than a million 
transactions per day, and enjoy savings month after month. 
Those are actual results reported by Attunity customers. Our 


revolutionary B2B integration software lets you create, share, 
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ry ATTUNITY 
This way to B2B 


automate and manage your business processes with customers 
and suppliers of any size, anywhere—while fully integrating 
your existing IT systems—and linking you with leading 
eMarketplaces. Register on our web site to learn how we're 
easing the way to B2B with companies like Compaq, Future 
Electronics, Verizon and Nu Horizons. Or call us today 
at (877) 888-8763. 


www.attunity.com/go/ul/ 





eing a company 
with a product 
can sometimes 
get in the way of 
doing business 
in the digital 
economy. At least that’s what 
many start-ups are learning 

Bill Tomeo, CEO of TellSoft 
Technologies Inc., recalls how 
his Colorado Springs-based on 
line voice service started as a 
traditional product that was li- 
censed to a server. But the com 
pany shifted gears after its ven 
ture capitalist, Softbank Venture 
Capital in Mountain View, Calif. 
argued convincingly that becom 
ing an application service pro 
vider (ASP) would be a better 
business model. 

TellSoft is one of many emerg 
ing companies that have taken the 
ASP route. That’s because by late 
1998, venture capitalists like Trin 
ity Ventures LLP in Menlo Park, 
Calif., began avoiding companies 
that insisted on developing and 


marketing packaged software. 
Like Softbank, Trinity has en 


couraged at least one of its 


clients, Aventail Corp. in Seattle, 


to shift from licensing its prod- 
ucts to offering them as an ASP. 

This new venture-capital in 
vestment philosophy is a key 
component of an overall shift in 
business models that’s been in 
spired by the Internet. Venture 
capitalists say they’re motivated 
by the global trends they see in 
business today. Those trends 
point to more and more out- 
sourcing of information tech 
nology functions. 

According to Grady Means, 
co-author of MetaCapitalism: 
The E-Business Revolution and 
the Design of 21st-Century Com- 
panies and Markets (John Wiley, 
2000) and a managing partner at 
PricewaterhouseCoopers in 
New York, the venture capitalist 
investment criteria and the 
emergence of ASPs are symp 


toms of an overall transfor 


ASPs 


mation of capitalism itself. 
Means contends that ASPs 
represent a core trend for what 
he calls “metacapitalism,” a new 
$200 trillion capital market 
made possible by the reinvest- 
ment strategies driven by the 
business-to-business economy. 
“Companies don’t want to invest 
capital for what are essentially 


services,” he says. 


FOLLOW THE MONEY 

This radical shift in the way large 
companies invest their capital 
makes the proliferation of ASPs 
inevitable, because corporate IT 
increasingly will focus on core 
business projects and outsource 
everything else. This will fuel 
staggering growth for ASPs, says 
Means, who suggests that most 
ASP market-growth estimates to- 
day, such as Stamford, Conn.- 
based Gartner Group Inc.’s pre- 
diction that the market segment 
will jump from $3.5 billion this 
year to more than $25 billion in 


2004, are too conservative. 

“People think we’re well into 
these things. But it’s just begin- 
ning,” Means says. 

Gus Tai is seeding many of the 
upstarts that are part of thi: 
transformation. A general part- 
ner at Trinity Ventures who's 
leading the firm’s software in- 
vestments, Tai says he believes 
the software development and 
distribution market is quickly 
shifting from a focus on creating 
products to a focus on delivering 
disposable services. 

This shift in thinking among 
venture capitalists is no minor 
phenomenon, argues another 
Trinity general partner, Tod 
Francis. In Silicon Valley alone, 
nine new companies get funded 
every day, representing about 
$90 million in daily equity in- 
vestments, he says. 

Contrary to popular belief, 
says Francis, most companies 
funded by venture capital are 
successful and greatly influence 


in the 
Catbird! 
Seat 
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>> Outsourcing has made hosted software 
a hot market for start-ups and put these 
new ASPs in the limelight with venture 
capitalists. By MARK HALL 





technology as well as business 
practices. For example, of all the 
venture-capital-funded compa- 
nies in 1998, 20% went public, 
40% were acquired, 30% are op- 
erating as private businesses and 
a mere 10% went under. 

Trinity currently has more 
than $1 billion invested and 
an $800 million fund that was 
recently created for more early- 
round investments, making it 
more likely that ASPs will domi- 
nate the emerging-companies 
landscape in the years ahead. 

“It’s rare for us to fund a li- 


censed model in new software 
companies,” Tai says. 

The latest and most appealing 
ASP business model no longer 
relies on up-front license fees 
and upgrade revenue. Instead, 
software charges are centered 
on time-based subscriptions or 
transaction volumes. No one 
will own software in the future, 
according to many venture capi- 
talists — users will rent it. 

Automatic Data Processing 
Inc. (ADP) in Roseland, N,J., has 
been using CoVia Technologies 


Inc. in Mountain View, Calif., an 
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ADP, says, “ASPs let us move more 
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Emerging Companies winner, to 
help it quickly deploy corporate 
portals for its 450,000 customers 

Like most companies, ADP 
didn’t have the staff resources to 
create a portal infrastructure 
and then debug, extend and 
manage it. An ASP like CoVia, 
which offers a pay-as-you-go 
service, made it possible for 
ADP to quickly launch a new 
revenue-generating program 

Tom Miller, vice president of 
Internet business development 
at ADP, says today’s business 
ind technology climate forces 
conservative organizations like 
ADP to work with start-ups that 
have embraced the new business 
models. “ASPs let us move more 
quickly than we otherwise 
could,” he says. 

Beyond faster deployment, 
ASPs provide companies with 
access to complex software at a 
low cost, including advanced on- 
line exchanges. John Bowlsby, 
chairman and co-founder of 
Eden Prairie, Minn.-based 
SourcingDirect.com, an online 
business-to-business specialty 
marketplace for pet and feed 
suppliers, says Agiliti Inc., his 
Bloomington, Minn.-based ASP 
and an Emerging Companies 
winner, “keeps us on the cutting 
edge of technologies.” 

Bowlsby adds, “We know a lot 
about trading commodities, but 


technology is foreign to us.” 


MAINSTREAM CHANGES 
ASPs help IT departments offset 
staffing shortages and give them 
access to advanced services. 
They’re also capable of auto- 
mating old processes, just like 
traditional software is. 

For example, at Dura Pharma- 
ceuticals Inc. in San Diego, in- 
forming employees about their 
health care coverage, 401(k) 
plans and other company bene- 
fits had been a manual process. 
The company had to distribute 
benefits forms to more than 
1,000 employees and then re- 
trieve and submit the completed 
forms to the appropriate agen- 
cies. According to Teri Erickson, 
manager of employee benefits at 
the $320 million specialty drug 
maker, the old process required 





a full-time staffer just to handle 
t 


1e paper load 

After studying several options 
earlier this year, Dura picked 
Emerging Companies winner 


Benefits Inc. in Los Ang 








automate the process throug 
online service. Erickson says in 
troducing the ASP’s software to 


employees was simple and ac 





tion was fast — so fast, in fact 


that Dura was able to immedi 
ately eliminate a position in the 
human resources department, 
which handled 
IBenefits se 


end connection 





Surance Carrier 


managers. So when e!1 





change insurance options during 


enrollment cycles or shift funds 





in their 401(k) portfolios, every 
thing is handled electronically, 
and Dura’s human resources 
department doesn’t need to get 
involved 

Despite the positive perfor 
mance of so many emerging 
companies, the media is awash 
with news of a business land 
scape littered with the virtual 
carcasses of dot-coms. This 


gives Many Managers pause 


when turning 





over to relative newcomers 
Before New York-based Pru 

dential Securities Inc. adopted 

TellSoft Technologies’ iTalk 


streaming technology to deliv 





daily audio market updates as 
service to its customers, Pru 
dential did a thorough audit of 
the company, according to 
Stephanie Gannon, an assistant 
vice president at Prudential 
Securities.com 

“We completed our traditional 
vendor analysis on TellSoft, as 


we were aware that they 





start-up. We implemented this 
system in a conservative man 
ner,” Gannon says. 

Kurt Lovil, vice president of 
technology at 24x7Develop 
ment.com Inc., a Web site devel- 
opment and integration compa 
ny in Phoenix, said his due dili- 
gence for TellSoft, one of Com- 
puterworld’s Emerging Compa- 
nies, included a review of its 
hosting operations, software 
architecture, business plan and 
accounting ledgers. 

Lovil says that although he 
wasn’t too worried about the 
ASP relationship, he was con 
cerned about his supplier’s tech- 
nical support. But he rates Tell 
Soft’s support as “wonderful.” 

All this makes it likely that, for 
at least the foreseeable future, 
ASPs will continue to dominate 
Computerworld’s Emerging Com 
panies list as they rapidly sell the 
services IT organizations need. B 
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Meet Your Future Backup — ADIC’s New Scalar 100 


\ new standard in scalable tape libraries from ADIC, 
the Scalar” 100 has all the features you want in a backup 


solution now and in the future. 


Unmatched Scalability. ADIC's Scalar 100 starts out as a 
one- or two-drive, 30-cartridge DLT tape library, comparably 
priced to smaller ¢ sompaq and HP units. Then it scales easily 
and cost effectively up to 6 drives and 60 cartridges to meet 
new storage demands and protect your investment. 

Easy, Plug-in Connectivity. Simple plug-in modules let 


the Scalar 100 adapt to your changing storage needs- 


SCSI, SAN, or NAS. 


For more information, visit Waele tet e Or call 1-800-336-1233. 


More Storage in Less Space. With 50% more storage 
capacity than comparably sized products, the Scalar 100 
packs 4.8TB* of storage capacity into only 14 rack units, 


saving valuable space for future growth. 


Drive-Independent Design. Backup with DLT today, 


and with AIT, LTO Ultrium, and SDLT models tomorrow. 


Unfailing Protection. Enjoy the highest level of service 
and support, including a full year of free on-site 
service from ADIC, the leader in open systems data 


storage solutions. 


adic 


 www.adic.com 





‘Mind Your 
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>> What Emerging Companies 
need to do battle. By Pimm Fox 


1D HOLLENBACH 


udging-from con- 
versations with 
business analysts 
and consultants, 
after the first 
ee blush of excite- 
ment, the start-up field is often 
littered with problems, missteps 
and hard luck. That’s not to say 
some of these companies won't 
find wide acceptance, but for 
most would-be entrepreneurs, 
the chances are slim. 

So what do our Emerging 
Companies need to do to keep 
the attention of information 
technology managers and thrive 
in their markets? Here’s what 
several industry insiders said 
about three key sectors. 


OUTSOURCED STORAGE 
Nishan Systems in San Jose, an 
Emerging Companies winner, 
says the best way to securely 
transmit data between storage 
devices and networked servers 
is Over existing networks that 
use standardized IP. 

It’s a safe approach to be sure, 
but Mark McDonald, who heads 
The Center for Process Excel- 
lence at Andersen Consulting in 


Chicago,-cautions that Nishan 


’ ‘must consider that while accep- 


tance of a new transport proto- 
col, Fibre Channel, may be far 
down the road, some sectors of 
the market will wait for it. “You 
want something with technology 
legs, something that isn’t going 
to lock you in before you are 
sure what will work,” he says. 

Yet Nishan claims its storage- 
over-IP products can deliver 
service as fast or faster than 
Fibre Channel technology and 
eliminate the need for new net- 
works. And with storage over 
IP, stored data can be accessed 
from anywhere; Fibre Channel 
technology is limited to 60 
miles. Fibre Channel advocates 
counter that it has price/perfor 
mance leadership for storage 
and networks and supports mul- 
tiple protocols such as SCSI, 
TCP/IP, video or raw data. 

So a challenge for Nishan is 
to figure out to what extent the 
competing standard will win 
favor, and then how to build in 
support for new technologies 
once they become viable and 
offer the same service levels. 

And then there is the specter 


of EMC Corp. in Hopkinton, 
Mass. — the industry’s dominant 
storage provider. According 
to Julian Chu, an analyst 
at Cambridge, Mass.- 
based Internet strategy 
consulting firm Main- 
spring, “EMC has high margins 
and most of its product develop 
ment is in software — the repli 
cation of data over a wide-area 
network.” Yet there is potentially 
financial support for Nishan 
coming from EMC and several 
reseller partners set to introduce 
storage-over-IP products. And in 
September the company bolster- 
ed its war chest with a $50 mil- 
lion funding round and strategic 
investments from industry heavy- 
weights like Sun Microsystems 
Inc. and Dell Computer Corp. 


INTERNET-BASED APPS 
2netFX, an Emerging Companies 
winner, sees broadband over IP- 
based networks as the way to de- 
liver content to customers faster 
using multimedia streaming. By 
focusing on high-quality digital 
video to desktop PCs, TVs and 
kiosks, San Jose-based 2netFX 
sees opportunity in broadband 
Internet broadcasting, confer- 
encing and corporate and educa- 
tional training. 

But Baskey wonders whether 
the company “can play the scale 
game in the business. Scale 
doesn’t matter as much in the 
[customer relationship manage- 
ment] space as it does in broad- 
band,” he says. “People have been 
talking broadband since 1994, and 
it was the right business model at 
the wrong time. To take advan- 
tage of the broadband network 
you have to deliver your service 
to lots of customers, otherwise it 
may not be profitable.” 

Echoing the economy-of-scale 
dilemma for video stream, Chu 
says it quickly becomes a com- 
modity service for the lowest 
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price: “The play that wins is a 
combination of operational 
excellence for the lowest price 
along with meeting industry 
standards.” That’s what 2netFX 


says it’s in the process of doing 


E-MARKET EXCHANGES 


In the e-market space, “the ex 


change is only valuable as more 
people use it,” says Chu, “that’s 
why market penetration is a suc 
cess factor and a prime driver in 
the business.” With its software, 
Emeryville, Calif.-based Com 
merceRoute Inc., an Emerging 
Companies winner, allows par 
ticipants to collaboratively share 
and automate processes over the 
Internet without placing a bur 
den on IT departments. So while 
the IT staff may need to facili 
tate the initial installation and 
operation, it isn’t a daily task. 

Travel2Events.com uses Com 
merceRoute software to inte- 
grate fulfillment partners and 
manage workflow by connecting 
travel and entertainment 
providers with publishers and 
sites to achieve an open support 
system. CommerceRoute auto 
mates data exchange with the 
fulfillment providers’ systems 

“Order fulfillment has proven 
the Achilles’ heel for many 
e-commerce companies, not in 
terms of outbound logistics, but 
more broadly in many areas of 
supply-chain management,” says 
McDonald. CommerceRoute 
wants to stay in the spotlight as 
it helps firms avoid this pitfall. 

Regardless of their market, 
start-ups face an uphill climb. 
Only a small number achieve 
success, whether they are 
bought by larger companies, 
merged into others or morph 
into something new. 

The winners are those with 
the lucky — and calculated — 
combination of talent, timing 
and resources. 
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Finally, a server that not only fits your company’s needs, but also fits in your company 
with its ultrathin 2U form factor, allows up to 21 servers and 42 processors 

size fool you. Like Dell’s complete line of servers, it packs a lot of power h ¢ 
capability at up to 1GHz and 133MHz Front Side Bus, the PowerEdge 2450 will give 
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With WRQ NetMotion wireless connectivity software, the only thing you have to give up is the wire. 


Wireless or wired, see us at A 
www.wrqnetmotion.com/killerapp WRQ 
For more information, call: 206.217.7100 or 800.872.2829 


oe reserved. WRQ, the WRQ logo, and NetMotion are either registered trademarks or trademarks of WRQ. Inc, in the USA and/or other countries. 
All other trademarks, trade names, or company names referenced herein are used for identification only and are the property of their respective owners. 





>> Caching tools from 
emerging companies can 
crank up your Web business. 


By RUSSELL KAY 


ww doesn’t 

really stand 

for “world 

wide wait,” 

but the stereo- 
type, like some, is based in fact 
“The biggest complaint about 
using the Web is its slow speed,” 
says David Strom, an Internet 
industry analyst in Port Wash- 
ington, N.Y. 

And as more people get high- 
speed Internet access, they’re 
likely to blame delays on a site’s 
owner. The problem is serious 
for business-to-business market- 
places and worse in the busi- 
ness-to-consumer arena, where 
people won’t wait for a slow 
page. So speeding up your Web 
site is an imperative. How do 
you do that? Here are a few use- 
ful tips, with advice from some 
users who have found products 
from our Top 100 Emerging 
Companies to help them. 

Highly graphical Web pages 
can be effective, but large files 
make for long downloads. Mod- 
ern compression techniques can 
often make a graphic smaller by 
an order of magnitude, with lit- 
tle or no visible quality degrada- 
tion. Also, subdividing complex 
graphics into several smaller 
files can cut downloading times. 

Consider navigation: How 
do visitors find what they’re 
looking for on a site? Clearly 
marked and labeled links ease 
the task, while confusing point- 
ers or buttons add frustration 
and misdirection. 

Good design is necessary but 
not sufficient. For a high volume 
of transactions, you need mas- 
sive computing power: lots of 
servers and good Web connec- 
tions. But if a site provides a lot 
of images or other large-file con- 
tent, it makes sense to distribute 
those servers around the coun- 
try or the world. An enterprise 
can do this without maintaining 
multiple physical server sites by 
using a distributed service, such 
as one offered by Akamai Tech- 
nologies Inc. in Cambridge, 
Mass. Companies can also use 
dedicated caching server hard- 
ware and software like that from 
CacheFlow Inc., one of Comput- 
erworld’s Emerging Companies, 
and Network Appliance Inc., 


both in Sunnyvale, Calif. If you 
do opt for external caching, 
make sure your content is syn- 
chronized at all the cache sites. 
Here’s how some e-commerce 
sites have used caching to speed 
up their sites: 

San Diego-based ProFlowers.- 
com opted to install specialized 
caching servers to improve its 
Web site’s performance. Yoshio 
Kurtz, ProFlowers’ director of 
research and development, 
notes, “We figured that for 
every CacheFlow appliance 
we installed, we would have had 
to implement four or five addi- 
tional Web servers to see similar 
performance gains. And because 


[these servers] require little 
maintenance and run their own 
operating system, we have 
avoided the significant labor 
costs [of] implementing so 
many new Web servers.” 

To prepare for last year’s holi- 
day season, KBkids.com in Den- 
ver upgraded its infrastructure by 
deploying CacheFlow appliances 
in front of its e-commerce site 
and outside the firewall. This cut 
the time needed to deliver full 
pages to customers and lightened 
the load on its servers and fire- 
wall. CacheFlow servers store 
and serve the content users most 
frequently request and monitor 
the source pages behind the fire- 
wall for content changes. 

Srikant Srinivasan, founder 
and CEO of KBkids.com, says, 
“Since we upgraded our tech- 
nology infrastructure, response 
time for content has been re- 
duced substantially.” 

Delayed response is magnified 
if your site delivers streaming 
audio or video. Strategies to deal 
with streaming media problems 


include multiple caching (either 
within your site or via an exter 
nal network), “overflow” servers 
and satellite transmission 

If streaming normal video 
presents a problem, how about 
high-definition television 
(HDTV) broadcast over an IP 
network? San Jose-based 2net 
FX.com Inc., also a Computer 
world Emerging Companies 
winner, has products to tackle 
those problems at both the client 
and server ends. David Hurwit 
director of the Convergence 
at 3Com ¢ orp., one of 2netFX’s 
partners in developing this tech 
nology, says HDTV over IP will 
enhance dot-com applications 
and services 

rhat’s music to some people’s 
ears. Thomas MacCalla, chief 
operating officer at the Enter 
tainment Technology Center, a 
consortium of movie studios 
and technology companies, says 
“Many of us in the entertain 
ment community and academia 
have been eagerly anticipating 
this day.” D 


peeding 
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!Overcoming 
Software 


Volatilities 


>> Installing the latest 
software on your network? 


‘Take it from the pro 


‘No 


new program is entirely 
risk-free. By DEBORAH RADCLIFF 


ast year, security 
consultancy 
a@stake Inc. in 
Cambridge, Mass., 
was hired to vali- 
date the findings 
of a well-known security assess 
ment tool at a government 
agency. Turns out, the scanning 
software itself was so insecure 
that it risked the integrity of the 
entire network, according to 
a@stake’s vice president ol 
research and development, 
who goes by the hacker handle 
“Mudge 

Nothing unusual there 
similarly harrowing tales of soft 
ware-induced vulnerabilities 
abound in the information tech 
nology industry. 

Not only are common oper- 
ating system browsers, mail 
servers and other popular soft 
ware tools full of bugs and vul- 
nerabilities, but the very soft- 
ware designed to protect the 
network can also be tricked, 
hacked or forced to render gap- 
ing security holes into the net- 
works they re supposed to pro 
tect. For example, some well- 
known firewalls, including Cisco 
Systems Inc.’s Pix and Check 
Point Software Technologies 
Ltd.’s Fire Wall-l, have been 
fooled by denial-of-service and 
IP fragmentation attacks (pack- 
ets sent with improper sequences 
or sizes) 

“All software from all vendors 


starts out insecure,” says John 
Pescatore, research director of 
security products at Gartner 
Group Inc. in Stamford, Conn. “A 
brand-new code base from a big 
vendor is likely to be as insecure 
as a brand-new code base from a 
start-up vendor.” That begs the 
question: If seasoned vendors 
create code with such vulnera- 
bilities, what about software 
developed by emerging soft- 


ware companies? 


RUSHED SOFTWARE 

While many in the IT commu- 
nity say they feel the new ven 
dors have more at stake if their 
products create security prob- 
lems, users of new vendor prod 
ucts say start-ups pose more of a 
security risk because they hastily 
develop code in a rush to market. 

“As a rule of thumb, when you 
put new software on a system, 
you are introducing new vulner- 
abilities. Commercially devel- 
oped software from start-ups is 
particularly notorious for these 
problems,” says Scott Blake, 
security program manager at 
BindView Corp., a security tools 
vendor in Houston. 

Citing BindView statistics, 
Blake says poorly written new 
software is responsible for a 
90%-per-year rise in security 
vulnerabilities. The best way to 
avoid software security prob- 
lems is to never run Version 1.0 
on a production system, advises 


22 EMERGING COMPANIES * NOVEMBER 13 


Pescatore. “Vendors have caught 
on to this and seem to be start- 
ing their version numbering 
with 3.0,” he says. 
Rafael Arroyo, network ana- 
lyst at United National Bank 
in Bridgewater, N.J., says he 
agrees that start-ups should, in 
theory, produce clean code the 
first time out if they want to 
capture market share. But in re 
ality, he says, start-ups common- 
ly use him and other IT man- 
agers as unwitting beta testers. 
“The new vendors have this 
business plan of ‘Get the prod- 
uct out there quickly,’” he says. 
“When we call those vendors 
and tell them there’s a security 
problem, they'll say they've got a 
patch and they’ll send it quickly. 
But we all know that if the patch 
was ready, it would have already 
been in or with the product.” 
For this reason, Arroyo buys 
from new vendors only if they 
offer a money-back guarantee. 
“I purchase it, test it hard-core 
for 30 days, and if I don’t like it, 
I send it right back,” he says. 
he ideal is finding a vendor 
whose product has undergone 
third-party independent security 
testing and can provide the test- 
ing documentation, which few, 
if any, do, according to Pescatore 
Barring that, Pescatore recom- 
mends researching the back- 
ground of the new vendor's 
chief technology officer or vice 
president of product develop- 
ment. Finding out if these key 
people came from a game com- 
pany or a security company 
would be useful, he says 


EVALUATING PROBLEMS 
Mark Decker, team leader at 

BF Goodrich Aerostructures, 
AAG Corp., which has U.S. 
headquarters in Raleigh, S.C., 
starts his product evaluations by 
reading white papers and media 
evaluations. He also asks for and 
checks user references. 





[When evaluating 
software from 


new vendors], / 
purchase it, test it hard- 
core for 30 days, and if I 
don’t like it, | send it right 
back. 


~ RAFAEL ARROYO, 
NETWORK ANALYST, 
UNITED NATIONAL BANK 


Even before selecting a new 
software tool, determine exactly 
what you need your new prod- 
uct to do. In May, Arroyo was 
looking for a product to moni- 
tor which programs employees 
access. He says ne ¢ hose Ever 
Admin from Powell, Ohio-b 
Aelita Software Inc. (one of 
Computerworld’s Emerging 
Companies), mostly because he 
felt the company would, at the 
very least, be responsive 

When the product arrived, 
Arroyo took advantage of the 30 
day evaluation to conduct test- 
ing in a mock network environ 
ment. “In this case, the software 
is internal to the network, and it 
Joesn’t run with admin privi 
leges,” he says. “So even if some 
one hacked it, EventAdmin can't 
do anything malicious because it 


only has access to a log file.” 


WEAK POINTS 
Decker followed this strategic 
process when considering 
another Aelita program called 
ERDisk to automate the task 
of building daily backup repair 
disks for his network servers. 
When evaluating the test copy 
of the software, he determined 
the program’s strategically weak 
point was that it needed Win- 
dows NT administrative privi- 
leges to run. If an application 
with administrative privileges 
or, in the case of Unix, root priv 
ileges gets cracked, it then gives 
the attacker complete control 
over the machine and all other 
programs running on it 
“Anytime you have a program 


hat requires administrative 


t 
] 
I 


evel privileges to run or inter 
act, you need to be aware of 
what it’s doing,” Decker says 

In a controlled environment, 
Decker’s testing team moni- 
tored ERDisk as it traveled 
throughout the test network 
to see what data it collected 
and from where until the team 
was Satisfied the program 
stayed contained to just those 
processes it needed to function. 
He also hit it with a barrage of 
hacker tools to see if an attacker 
could exploit the application to 
gain administrative privileges. 

Arroyo is just as concerned 
with applications that require 
him to open extra ports to travel 
to and from the network. “I had 
a problem in some automatic 
stocks-and-bonds updating soft- 
ware I was trying to test. It 
locked up even though the user 
account was set up with pass- 
word, port number and proxy 
server,” he explains. “The up- 
date program was problematic 
with five different types of fire- 
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OF LIABILITY AND 
RESPONSIBILITY 


Vendors and customers have 
different responsibilities in 
making software more secure, 
says Mary Ann Davidson, 
director of security product 
management at Oracle Corp. 
Vendors, she says, should 
engineer their applications 
more securely in the first place. 
To do this, she says, vendors 
should do the following: 


> Develop a core group of security 
experts to put security into appli- 
cation design itself. 

> Centralize common security 
functions to work together. 

> Develop security coving prac- 
tices to avoid common vulnerabil- 
ities like buffer overflow. 

> Conduct regression testing to 
make sure new versions don’t 
negate previous security controls. 
> Submit to independent product 
assessments and security evalua- 
tions like the Common Criteria 
testing program, sponsored by 
the National institute of Stan- 
dards and the National Security 
Agency (http://csrc.nist.gov/cc/). 


Customers, she says, should do 
the following: 

> Make security part of the 

> Evaluate a product before 
installing it on the network. 

> Report incidents and vuinerabil- 
ities to the vendor. 

> Apply patches promptly. 

> Conduct regular security 


> the use 


would only work if we punched 
1 hole through our firewall. 
Eventually, I chose another 
product 

Once the application is on the 
network, Arroyo and Decker 
make sure the application is 
retested during a follow -up 
or scheduled network security 
assessment. This overlapping 
testing process is the ideal, 
according to Mudge, who adds 
that you can’t test a new appli 
cation too much, especially if 
that application faces the big, 
bad Internet. 

“The Internet is a hostile 
environment. You don’t know 
what sort of data will be thrown 
at an application,” he says 
“Don’t be afraid to kick the tires 
and see how an application 
comes out under stress. You 
want to make sure that if it fails, 
it fails in a safe manner, which 
means it fails closed, without 
giving up services or informa- 
tion to an attacker.” D 
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>> Sure, there’s risk. But customers of software 
start-ups say the payoff can be dramatic. 
By STEVE ALEXANDER 


HARRY BOLTZ, director of inventory 
and forecasting at Quaker Fabric, 
warns, “The pioneers get the 
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Big Risks. 
Even Bigger 
Rewards 
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uying software 
from emerging 
companies can 
be risky. It 
means taking a 
chance ona 
smz as little or no 
track record, unproven technol- 
ogy and software that’s probably 
still being debug 
g upside, too. 
loiting a start-up’s advanced 
gy can provide custo- 
mers with a competitive edge. 

So, what’s it like to work with 
an emerging company? Custo- 
mers of four start-ups say they 
had good experiences and that 
the risks can be managed — in 
fact, knowing what they know 
now, they'd do it again. 

One way to mitigate risk is to 
be an early customer, but not 
the first one, says Harry Boltz, 
director of inventory and fore- 
casting at Quaker Fabric Cort 
a Fall River, Mass.-based supf 
er of upholstery fabric to the 
furniture industry. His company 
is using iCollaboration supply- 
chain software from Adexa Inc. 
in Los Angeles, one of Comput- 
erworld’s Emerging Companies. 
Boltz says the software corrects 
a major w in manufacturing 
resource planning systems: 
their inability to take into ac- 
count manufacturing-capacity 
bottlenecks. 

“The pioneers get the arrows, 
so don’t be the beta site,” Boltz 
says. “It’s better to do your 
homework and talk to existing 
customers. Although we’re on 
the third textile company to use 
this software, there is an advan- 
tage in that.” 


WHEN BIGGER 

ISN’T BETTER 

But don’t hang back too long 
when picking a start-up. Another 
Adexa customer, Philips Semi- 
conductor, says the lesson to be 
learned from doing business 
with small start-ups is that they 
can have better products than 
larger, established companies. 

“A big company is not alway 
better,” says Ken Williams, busi- 
ness systems manager at Philips 
Semiconductor in Albuquerque, 
N.M. His firm initially rejected 

a because it thought the 
company was too small — and, as 
a result, lacked the necessary cor- 
porate partnerships and financial 
stability — even though its prod- 
uct offered better functionali 

“Don’t weed out the small 
companies,” Williams advises, 
noting that Adexa has been will- 
ing to change its software to 
meet the needs of its customers. 
“Too often, the big software 





If we ran this trade show, everyone could have 
FIC ae AE ae 





Your audio. Your video. Directly to your audience. 


What if you never had to elbow your way through a convention hall again? Or wear a “My name is” 


name tag? Or carry one of those plastic bags stuffed with pamphlets you’ll never read? At Activate, 
that’s our goal. Not to do away with trade shows, but to help you use streaming media to make 
your life easier. To help you bring your audio, your video, your message, your trade show booth, 


directly to anyone you want, anywhere in the world. For more information, call us at 


1-877-577-9261 or look us up on the Web at mene (py ) act! Vale 


a emgi company 


©2000. Activate Inc 





Big Risks. 
Even Bigger 
Rewards 


companies won't do that. They 
just sell you the software and 
then move on to someone else.’ 

Reduced time-to-market is 
inother factor that mitigates the 
risk of doing business with an 
emerging company, says Rick 
Lowe, vice president of custo 
mer service and support at 


lickRebates.com Inc., a Santa 


l } 
Ch 


ira, Calif.-based firm that pays 
consumers to view advertising 
on the Web. His firm uses Right 
Now Web, a software product 
from Emerging Companies win 
ner RightNow Technologies Inc 
in Bozeman, Mont., that inte 
grates features such as self-help 
instructions, e-mail management 
and live Web chat into a single 
product suite 

Emerging companies and dot 
coms are made for one another, 
Lowe says. “Start-ups move light 
and fast compared to traditional 
companies. And if you are ina 
dot-com company like ours, you 


have to move fast too,” he says. 


As a result, a dot-com is quick 
to take on a promising but un 
tried technology from an emerg 
ing company, Lowe says. “The 
start-up’s latest product may not 
be the most beautiful thing in 
the world, but it may be feature 
rich,” he says. “The documenta 
tion may be thin when they first 
introduce the product, but it 
doesn’t matter if the product 
doesn’t break.” 

Another way to reduce risk 
when dealing with a new firm is 
to schedule payments based on 
the achievement of performance 
milestones, says Bill Lilla, vice 
president of marketing and strat- 

y at Peet’s Coffee and Tea Inc., 
a retailer in Emeryville, Calif. 
Peet's uses E.4, a data manage- 
ment application from Emerging 
Companies winner E.piphany 
Inc. in San Mateo, Calif., to man 
age a customer database for on 
line and mail-order sales and to 
analyze sales information. 

“Designing your agreement in 
terms of compensation based on 
performance is a motivator for 
the emerging company and a 
good protective device for you. 


You also should get a firm com- 


mitment on staffing levels and be 


very clear about what roles the 
vendor’s people and your people 
will play,” Lilla says. “If the ven 
dor has good intentions, as 
E.piphany did, they will agree to 
those things, because they have 


confidence in their product.” 

Sometimes, your own compa 
ny’s strengths can help counter- 
balance potential weaknesses in 
an emerging company, Lilla says. 

“Our risk in going with some- 
one like E.piphany was the 
question of whether they would 
be able to retain their employ 
ees, who were highly skilled in 
databases and customer rela 
tionship management,” Lilla 
says. “But we felt they were on 
the right track and offered the 
skills we needed. And we felt 
confident that we could manage 
the software once we got be 
yond the initial installation.’ 

But be prepared to spend a lot 
of time helping the company in 
stall its software, says Jim La 
timer, director of purchasing at 
Genentech Inc., a genetic engi 
neering firm in San Francisco 
Genentech is using Chemdex 
MarketLink, an online market 
place built by Emerging Compa 
nies winner Ventro Corp. in 
Mountain View, Calif., that links 
life sciences companies to their 
suppliers. Although the project 
came in on schedule, the non-IT 
executives at Genentech were 
amazed at how long it took. 

“Don’t underestimate the 
amount of time it takes to devel- 
op something with a software de 
velopment company. In what was 
a brand-new area like this, there 
were a lot of unknowns and tech- 
nical difficulties,” Latimer says 


But even though dealing with 
an emerging company took a lot 
of time, it was more practical for 
Genentech than developing the 
e-commerce application on its 
own would have been, he says. 

“The risk of using a start-up 
company was mitigated by the 
fact that we didn’t want to spend 
the time and money right then to 
do it ourselves,” Latimer says. 

But taking a chance on emerg 
ing companies has paid off for 
these customers. They say the 
technology from the start-ups 
helped them get ahead of com- 
petitors, keep customers happy 
or save money. 

“In the textile industry, our 
customers are demanding short- 
er and shorter lead times. One 

vay for us to do that is to re- 
duce the manufacturing cycle 
time,” Boltz says. The Adexa 
software does that by being 


Too often, 
the big 


software 
companies. .. just 


sell you the soft- 


ware and then 
move on to some- 
one else. 


KEN WILLIAMS 


CLICKREBATES.COM’S RICK LOWE: “Start-ups move light and fast. . . . And 
if you are in a dot-com company like ours, you have to move fast too” 
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more reliable than Quaker Fab- 
ric’s previous software and by 
optimizing production schedul- 
ing, based on data about raw 
materials availability and pro- 
duction bottlenecks. 

“The cost of the software was 
more than justified,” Boltz says. 
What’s more, he adds, “any com- 
pany that doesn’t have this prod 
uct risks going out of business 
within five years if their com- 
petitors adopt it.” 

Williams says it’s hard to 
measure the additional business 
Philips Semiconductor gets as a 
result of delivering semicon- 
ductors on time. But he says 
he’s convinced that customers 
are pleased that the Adexa soft- 
ware helped Philips plan pro- 
duction runs more effectively 

“The only way to quantify that 
is to assume that if you do what 
you say you will do, a customer 
comes back. And that equates to 
more revenue,” Williams says. 

Lowe says his company can 
dramatically increase the num- 
ber of consumers who view its 
advertisements because the 
RightNow Technologies soft- 
ware automates much of the 
site’s work. That lets him sup- 
port 350,000 Web customers 
with a staff of six people. The 
software’s self-help knowledge 
base answers routine questions 
about the site’s business at a rate 
of 18,000 to 29,000 queries per 
week. As a result, it’s possible to 
provide turnaround in less than 
two hours on problems that re 
quire the help of a service repre- 
sentative, he says. 

Lowe says the combination of 
the software's advantages and us- 
ing help desk people based in the 
Philippines helps keep his costs 
low. “My support costs are 10% 
that of my competition,” he says. 

The rewards of dealing with 
emerging companies can be sub- 
stantial, and the risks of dealing 
with them are sometimes exag- 
gerated, Lilla says. 

“With an emerging company, 
the risk is in losing the talent, the 
support and the continuity of the 
people who have been working 
on your installation,” Lilla says. 
“But if you really think about it, 
those risks exist whether you are 
doing business with a small, mid- 
size or big company.” 

If anything, an emerging com- 
pany may be more inclined to 
take care of its customers than a 
more established firm would be, 
Lilla says. The reason? To an 
emerging company, every custo- 
mer is special. 


Alexander is a freelance writer in 
Edina, Minn. 
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Emerging Companies to Watch 


Methodology: To identify and 
select the Top 100 Emerging Companies for 
our special supplement, Computerworld in 
vited companies to nominate themselves on 
our Web site from June 5 through July 14 

To qualify, companies had to be corporate 
focused, for-profit ventures with revenue of 
less than $250 million and founded no earlier 
than 1995. Qualified candidates also had to 
have an innovative product or service avail- 
able by Dec. 31, 2000, and customer 
references. To be considered, companies had 


COMPANY NAME 


Crossworlds Software Inc. 


LOCATION 


Crystallize Inc. 


Data Junction Corp. Austin, Va 


Epicentric Inc. 
Extensibility Inc.* 


Outlook Technologies Inc. Chicago 


Agiliti Inc. 

Broadreach Consulting Inc. Wayne, Pa 
CoVia Technologies Inc. 
Genesis10 New York 
[Benefits Inc. 
Interliant Inc. 


Telera 


TellSoft Technologies 


Burlingame, Calif 


Ann Arbor, Mich 


San Francisco 


Chapel Hill, N.C 


Bloomington, Minn 


Mountain View, Calif 


El Segundo, Calif 


Purchase, N.Y. 


Campbell, Calif 


Colorado Springs 


to have a management team in place (rather 
than one person acting as CEO or vice presi 
dent of marketing, sales and so on) 


Nomination forms we egorized by 


market. A panel of Computerworld editors 


then reviewed the forms and selected finalists 
neach market segment 

The finalists’ nomination forms were then 
sent to a panel of information technology 
industry influencers — senior-level execu 
tives who are both providers and users of IT, 
including Chris Horrocks, CIO at Selecterra 


NUMBER OF 


ST a-W Ulett) ak) 


www.crossworlds.com 70 


www.crystallizes.com 


www.datajunction.com 
www.epicentric.com 


www.extensibility.com 


www.outlook.net 


www.agiliti.com 
www.ebroadreach.com 
www.covia.com 
www.genesisi0.com 
www. ibenefits.com 
www.interliant.com 
www.telera.com 


www-.tellsoft.com 


Annuncio Software 
E.piphany Inc. 


Ineto Inc. Austin, Texas 


IslandData Corp. 


Knosys Inc. Boise, Idaho 


Kovair Inc. San Jose 
MarketSoft Corp. 


Responsys.com 


RightNow Technologies Inc. 
Service$11.com Inc. 
Talisma Corp. 


Dallas 
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Mountain View, Calif 


San Mateo, Calif 


Carlsbad, Calif. 


Lexington, Mass 
Palo Alto, Calif. 


Bozeman, Mont 


Kirkland, Wash 


Www.annuncio.com 


www.epiphany.com 


www.ineto.com 


www.isianddata.com 
www.knosysinc.com 


www.kovair.com 
www.marketsoft.com 
www.responsys.com 


www.rightnowtech.com 


www.service9T1.com 
www.talisma.com 


2000 


| FOUNDED FOUNDER(S) 


Inc.; Tim Byers, ClO at SESCO Inc.; Jeanne 
W. Ross, principal research scientist at the 


MIT Center for Information Syste 


Ann Delligatta, ClO at Autobytel.com Inc.; 
Irene Dec, vice president of The Prudential In- 
surance Company of America; Mike Crowley 
ClO at Campbell Soup Co.; Dick Hudson, 
president of Dick Hudson & Associates; Bob 
Schwartz, vice president and CIO at Panason- 
ic USA; John Puckett, vice president and gen- 
eral manager of wireless and Internet strate- 
gies at Polaroid Corp.; Priscilla Tate, director 


AY 


1996 Katrina Garnett Public 


1998 Helene Abrams Private 


Private 
Private 


Darrell Blanford 
Ed Anuff, Oliver Muoto 


ReidConrad,LeeBuck Private 


Elias Manousos, Robert | Private 


Grzywinski 


Tom Kieffer Private 


James W. Dixon Private 


Deidre Paknad Private 
Daryoush Paknad 


Harley Lippman Private 


Private 


Public 


John Gran 


Leonard J. Fassler 


Prem Uppaluru Private 


Mukesh Sundaram 


Shaun McNerney, 
Paul Carver 


Private 


Didier Moretti, 
Maurizio Gianola 


Steven Blank, 
Elliot (Ben) Wegbreit 


Mike Betzer, 

Alasdhair Campbell, 
Stephen Michael 

Guy Jones, Jeff Stanford 
Bob Lokken 


Private 


Public 


Private 


Private 
Private 


Private 
Private 
Private 


Krishna Subramanian 
Greg Erman 
Anand Jagannathan 


Private 
Private 
Private 


Greg Gianforte 
Lawrence Schwartz 
Pradeep Singh 





of the Technology Managers Forum; Honorio 
Padron, president of the business services 
group at Unicom Corp.; John Voeller, chief 
knowledge officer, chief technology officer 
and senior vice president at Black & Veatch; 
and Alan E. Brill, senior managing director 
at Kroll Associates. 

The panel of IT influencers rated the final- 
ists on the following characteristics: 
@ The company and its technology offer 
demonstrable value to corporate IT oper- 
ations in Fortune 1,000 companies; the 


ee Sees) 
PRIVATE 


PRODUCT(S)/SERVICE(S) 


InterChange Server, application connectors 
custom and legacy application integration 
tool set 


Data Conversion Solution 3.1, 
Change Key Flexfield Solution 3.1, 
Supply Chain Optimization Solution 4.2 


Data Junction 7.0, DJEngine 7.0 

Portal Server 3.0, Syndicated 

Services 3.0 

XML Authority 1.2, XML Canon Beta EA, 
XML Instance 1.0 

CMS/Media 1.2, CMS/Merchant 1.1, 
CMS/Core1.2 


Business services, e-commerce 
services, IT services 

Management consulting, applications 
and infrastructure solutions 

SalesOnline, Intranet Included, Team- 
Online, BizOnline 2.0, InfoPortal Platform 


IT staff augmentation, project management 
services, project outsourcing 


iElect, (Admin, Worksite 


INIT ASP Host, INIT Commerce: Channel 
Commerce Platform Solutions, 

INIT Collaboration: Defeating Borders 
Telera Contact Center Connect, 

Telera Connect, Telera Quick Connect 


iTalkWeb, iTalkLive, iTalkSlides 


Annuncio Live 2.1, Annuncio ToGo 1.0, 
Annuncio Bright 3.0 
E.5 System 


Ineto Conductor 


ExpressResponse 4.5 

ProClarity OLAP Client 2.0, 

ProClarity Analytical Platform 2.0, 
ProClarity Add-In for Microsoft Excel 1.0 
Kovair ViPCenter Strategic Account 1.0 
eLeads, eOffers 

Responsys Interact 2.3, Responsys 
Jumpstart 

RightNow Web 3.2 

Webskin 3.0 

Online eCRM Suite 2.0, 

Enterprise eCRM Suite 2.5, 

Small Business eCRM Suite 2.5 





in 2001 


pr t or service addresses probiems or chaile 


that IT managers face 
@ The company is innovative; the prac 


presents a new and creat 
presents a new and Creative 


pany demonstrates p 


ability to exec 
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Emerging Companies list 
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E-business infrastructure software 


Oracle applications market software 


Data integration software 


E-commerce portals and portal networks 


E-business sof 


Back-office infrastructure for Web sites 


Rentable application service 
Business-to-business services 

Hosted Web applications 

Software development consulting services 


Internet-based human resources software 


Hosted applications and Internet professional 
services 


Business communications application 
Services 

Phone-to-Internet content 

and communications solutions 


Electronic-marketing software and services 
Customer interaction software 


t communications product 


E-mail and Web management software 
Business intelligence 

online analytical pre 

analytical applications 

Relationship management software 
B2B and B2C software 

Online permission marketing software 


Web-based customer service software 
Web-based support services 
Web-based customer relationship software 


PROFILE 


Extensibility: Riding the XML Wave 


BY ROBERT L. MITCHELL 

When consultant Wafa Khorsheed set to 
work on Dearborn, Mich.-based Ford Motor 
Co.’s XML-based Build-To-Order project, 
which will allow the automaker to sell over 
the Internet, he turned to XML Authority, a 
software tool from Extensibility Inc. in 
Chapel Hill, N.C. Khorsheed says he was 
impressed by the intuitive graphical user 
interface of the tool, which was designed for 
creating, managing and converting XML 
schemas. “It conveys the logic of the schema 
easily,” he says. 

“[XML Authority] is a very intuitive, very 
approachable technology that lets users 
work at the abstraction level and not get 
their hands dirty at the code level,” explains 
Extensibility CEO Reid Conrad. 

“XML is central to where we see technol- 
ogy going,” he adds. “We want to dominate 
in the XML infrastructure space.” Those are 
big words for a start-up launched in 1998 
with just $1.7 million in venture-capital 
funding. But in the past two years, the com- 
pany has sold more than 2,500 software 


PROFILE 


licenses to customers 
such as Pricewaterhouse- 
Coopers in New York and 
Sun Microsystems Inc. 
And it has signed up an 
~ impressive list of partners 
Extensibility CEO that offer XML Authority 
Reid Conrad with their own products, 
including such heavy- 
weights as Microsoft Corp., Oracle Corp. 
and Commerce One Inc. in Pleasanton, Calif. 
“The key to Extensibility is to look at who 
has adopted them,” says Marshall Martin, an 
analyst at Zona Research Inc. in Redwood, 
Calif. “These are very inventive companies 
they partner with. Each has made a build- 
vs.-buy decision.” Another reason for suc- 
cess may be pricing: XML Authority starts 
at $99.95 for a single-user license. 
Computerworld wasn’t the only one to 
notice Extensibility. On Aug. 3, Palo Alto, 
Calif.-based e-commerce vendor Tibco 
Software Inc. acquired Extensibility in 
a stock transaction valued at about $100 
million. » 


Knosys: Casting the Right Team 


BY ELLEN FANNING 

Some might consider it putting the cart 
before the horse, but for Bob Lokken, 
president and CEO of Knosys Inc. in Boise, 
Idaho, casting the right team of people first 
and then finding a product to sell was key 
to launching a successful start-up. 

“(It was] a little bit backwards. But the 
most important aspect of a start-up is its 
team of people,” says Lokken. 

Launched in late 1995, Knosys is a spin-off 
of Boise, Idaho-based Extended Systems 

Inc., which itself was a 
spin-off of Hewlett- 
Packard Co. The founding 
members, Lokken, Clay 
Young, Phil Bradley, Gary 
Braach and Mark Ickes, 
teamed up to create 
president and CEO —- ProClarity, a front-end 
analytical application 
platform for Microsoft SQL Server 7.0 that 
allows end users to graphically organize and 
then analyze data over a corporate intranet. 
ProClarity eliminates the need for interven- 
tion by the IT staff, thus reducing installation 
and maintenance costs. 


The Veteran’s Administration Hospital in 
Tacoma, Wash., uses ProClarity to browse a 
data warehouse of patient information. Jean 
Laubscher, project manager for the hospital's 
Consumer Health and Information Perfor- 
mance System development team, says the 
tool helps end users, including data special- 
ists, executives and quality managers, dis- 
play patient data for analysis. 

“It’s a very intensely graphic product that 
lets you visualize the data. I would contrast it 
with a flat, black-and-white report with 
columns and numbers. This is highly visual 
and rapidly responds to queries. You make 
your selection and see it displayed immedi- 
ately,” says Laubscher. 

Lokken reports that Knosys now employs 
75 people and expects revenue growth of 
200% over last year’s revenue of $2.9 million. 
An initial round of funding was provided by 
Pacific Asset Partners. 

Howard Dresner, an analyst at Stamford, 
Conn.-based Gartner Group Inc., says 
Knosys has “bet the farm” on Microsoft 
Corp., but adds that isn’t a bad bet to make. 
“[Knosys] is a visionary in the market. Now 
it’s all about execution,” he says. 9 
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NUMBER OF | YEAR | gad 
COMPANY NAME LOCATION WEB ADDRESS EMPLOYEES FOUNDED  FOUNDER(S) PRIVATE PRODUCT(S)/SERVICE(S) 


Acta Technology Inc. untain View, Calif. | www.acta.com 206 1996 lex Gorelil Private ActaWorks RealTime 4.2, Commerce 
Sachi vi 2 es 1.0, Analytic eCaches 2.0 
Biue Martini Software Inc. San Mateo, Calif www.bluemartini.com 3 1998 Monte Zweben Private Customer Interaction System 3.1, 
support services, e-business intelligence 
services 
Cephren Inc. WWW.Cef é Jas Dhillo rivate ProjectNet 4.0, MarketNet 1.0, PrintNet 1.0 
DataCert.com Inc. Houston www.datacert.com Eric M. Elfman ShareDoc 1.0, UPS Document 
Exchange Invoices 1.0 


rn 


ECOutlook.com Houstor www.ecoutlook.con 10£ ar stor Private SupplierLines, CustomerLine 


Emerald Solutions ortlan www.emeraldsolutions.com Martin Wright, Strategy services, interactive design 
Jerry Grant, Steve Darrow services, engineering technology services 

GetThere Inc.** f valif www.getthere.corr 3 1998 Jan Whaley Put slobal Manager 4.6, FlightRez, ePartner 
Br YOX 

Groundswell Inc San Franciscc www.groundswell.net : 1999 Paul Stich, Dean Alms Internet consulting services 


IPNet Solutions inc. ewport Beach, Calif. | www.ipnet-solutior r 08 1996 Don W Priva EBiznes 3.2, eBizness Transact 3.2 
eBizness C e3.2 


NetReach Inc. Ambler, Pa www.netreach.com g 1995 Peter G. Randall Hosting solutions, application services 


Newmediary Inc. Newton, Ma www.newmediary.cor 50 1999 Scott Coher Private E-business service 


ONEX Inc. Indianapolis www.onexinc.com 1997 Joseph Huffine, € E-business consulting services 
Sally Breen 
OnLink*** Redwood City, Calif www.onlink.con if 1996 Buck French, Jeffrey Priva OnLink Sales 3.4, OnLink Surveyor 1.0 
{ ans, Patricia Munter OnLink Compose 
Perficient Inc. www.perficient.com 1998 Bryan Menell Public Virtual Professional Services Organizations 
Virtual Education Services 
Organizations 


Saga Software Inc. Reston, Va www.sagasoftwar T 1997 Janiel F. Gill Public Sagavista 1.2, Natural 4.1, Adabas 7.1 


r 
i t 
Ventro Corp. Mountain View, Calif. | www.ventro.com 63 1997 David Perry LabPoint, Promedix, Chemdex MarketLink 


1998 Not applicable Pub Imagine Process, Xpediators, 
rmed by a spin-off Enterprise eQ 


Zefer Corp. Boston www.zefer.com 1998 Anthony Tjan, KamingNg Private Consulting services 


Xpedior Inc. ( 


lat 


Adexa Inc. Los Angele NWW.adexa.com 1995 K. Cyrus Hadav Private ~ollaboration 4.6 

Aeonware Inc. Alpharetta, Ga www.aeon-shopping.com 5 1995 Michael Mildenberger Private Aeonware MARK/8 Marketplace, Aeonware 
MARK/8 Hosting, Aeonware MARK/8 
Wholesale Manufacturing Procurement 


CommerceRoute Inc. Emeryville, Calif www.commerceroute.cor 57 1997 Doron Roten rivate CommerceRoute 2.0, eBusiness Suite 2.0 
jlobal Connect 


CrossCommerce Inc. San Francisco www.crosscommerce.com e Peter Nordberg AIM 1.0, Virtual Product Warehouse 1.0, 
Merchandising Intelligence 1.0 


Exterprise Inc. Austin, Texa NWwW.exterprise.con inoj Saxena Private ActiveMarket 2.0 


HelloBrain.com www.hellobrain.corr Joe Tung, Bharat Sastri Private Intellectual capital exchange 
private exchanges 
tation Marketplace 1.0 


+ 


Logistics.com Burlington, Ma www.logistics.con 40 2006 Sheff Privat Digital Transp 


Nipper solutions, carrier 
MindFlow Technologies Inc. Plano, Texas www.e-mindflow.com : 1999 Jay Reddy, Mark Griffis Private ProcureMind 1.5 
Mxi Technologies Ltd. Ottawa, Ontar V n rT 1996 Brad Forsyth, Doug Brouse Private Maintenix 3.2, Expeditor 1.1 
Nitorum Corp. Norwalk, Conn 1999 Kristopher King Private Intelli-Gage 2 


SingleSourcelT Columbus, Ot www.singlesourceit.con 7 1999 Rand rivate Decision support, acquis 


IT-re yr do 


Tradec San Jose www.tradec.com 1996 John Abe Private Tradec Standard 5.0, Tradec wit 
PurchasingPro 5.0, Tradec with SalesPro 1.1 


Vitessa Corp. www.vitessa.net 1997 David P. Mullan vate Vitessa Merchant Exchange 1.5 

2netFX San Jose www.2netfx.com : 1996 Eric Yao riva HDTV over IP Server & Player, ThunderCast 
IP Serve’ amRider Player 

Activate Corp. Seattle www.activate.com 1997 Chris Maskill Private Active Conference Center 1.1 

Backsoft Corp. Sarasota, Fla www.backsoft.com 70 1997 Bert Kastel, Rich Swier Private <b>Commerce 2.0, <b>Procurement 2.0 
<b> Talk 3.0 


Buzzsaw.com Inc. San Francisco www.buzzsaw.com 1999 Anne Bonaparte, Larry Private Project collaboration, bidding, construction 
Wares, Carl Bass management 


CUseeMe Networks Nashua, N.H www.cuseemenetworks.con 28 2000 Killko Caballero Public V2ASP, CUseeMe World, Videochat Your Site 


Delano Technology Corp. Markham, Ontario www.delanotech.com 1998 Bahman Koohestani Public Delano e-Business Interaction Suite 2.5, 
Delano Customer Velocity 2.0 


ERoom Technology Inc. Cambridge, Mass www.eroom.com 1996 Jeffrey Beir, Pito Salas Private eRoom 4.2, professional services 
EYak Inc. Boston _ www.eyak.com 1999 eSEE 
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Xpedior: Developing E-Business 
Strategies for Customers 


BY MELISSA SOLOMON 
Allstate Insurance Co. needed to get a handle 
on its project management. But when the 
company put out a bid for an information 
technology consultant to help create a Web- 
based application, just a few firms responded. 

And among those, the only contender 
“who had a keen interest in developing a 
relationship with us was Xpedior,” says 
Andy Rieder, assistant vice president at the 
Northbrook, Ill.-based insurance company. 

Xpedior Inc. got the job, and, with the sys- 
tem scheduled to go live this month, Rieder 
says he has no regrets about his choice. 
“They’ve been very cooperative, and they 
haven't disappointed us in terms of quality 
or cost,” he says. 

David Campbell, president and CEO of 
Chicago-based Xpedior, says the key to the 
company’s success is its ability to customize 
electronic-business strategies for compa- 
nies. “[We look at] how people can do their 
business differently because the Internet 
exists,” he says. 


PROFILE 


Xpedior works with 
companies to examine 
hundreds of processes, 
like recruiting, planning, 
distribution and procure- 

. ment, to see if there are 
David Campbell, new or refined ways of 
Xpedior’s president handling those tasks in an 
and CEO e-commerce world. 

The company, formerly a division of Meta- 
mor Worldwide Inc. in Houston, was found- 
ed three years ago but went public just last 
December. With 1,700 employees and cus- 
tomers such as Bell Canada International 
Inc. in Montreal, Citibank in New York and 
Hewlett-Packard Co., Xpedior stands out as 
one of the leaders in its industry, says Andy 
Efstathiou, an analyst at The Yankee Group 
in Boston. 

“The good news about them is they’ve 
grown solely by organic growth rather 
than by buying,” he says, which has allowed 
the company to develop a single corporate 
culture. } 


HarvestRoad: Targeting New Markets 


BY LEE COPELAND 
After netting a $15 million bounty from an 
initial public offering on the Australian Stock 
Exchange last September, Perth, Australia- 
based HarvestRoad Ltd. is ready to expand 
into the Asian markets. 
Founded in 1996 by Grame 
Barty, a former telecom- 
munications executive at 
Nortel Networks Corp., 
the start-up develops soft- 
Grame Barty, Har- Ware tools that automate 
vestRoad’s founder the creation of Web por- 
tals and community sites. 
HarvestRoad’s flagship product, WebPow- 
er, is a suite of four applications: a wizard- 
driven tool for setting up a Web site, a tool 
for publishing documents to the Web, a 
document management application and an 
e-commerce engine. All the applications in 
the WebPower suite are accessible via a Web 
browser and are available on Sun Solaris, 
Unix or Linux operating systems. 
Barty, managing director at HarvestRoad, 
says he believes support for Linux will drive 
adoption of the new product in China, India 


and Malaysia, the three markets his company 
is targeting. Barty also notes that the prod- 
uct’s relative ease of use drove its adoption 
in Australia. 

Helen Thompson, a project leader at The 
Electronic Chamber of Commerce in Victo- 
ria, Australia, says WebPower enabled the 
nonprofit organization to create and launch 
its portal site in four months. “The tools are 
very easy to use, and that’s why we’ve found 
them attractive,” says Thompson. “Normal 
people, not those with IT specialist skills, are 
maintaining the site, and it’s easy for them to 
regularly publish and update information.” 

The organization also trains business 
members to create auxiliary sites, which link 
to the main portal, with HarvestRoad’s tools. 

Barty estimates that 80% of the firm’s 
$2.4 million in revenue last year came from 
Australia, while the remaining 20% was 
derived from Asian markets. Barty says he 
hopes to double sales abroad by next year 
and operate in the black by next October. 

The company employs 68 people and post- 
ed an income loss of $3 million for its fiscal 
year ended June 30.9 
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NUMBER OF a4 ag) Reedy 
pee) ak LOCATION tele) EMPLOYEES | FOUNDED | FOUNDER(S) bath Ns PRODUCT(S)/SERVICE(S) 


FinTrack Systems Corp New York www. fintrack.com 1997 Murugan Manivanan Private Equity Trading System 1.2, Derivative Trading 
System 1.0, Fixed Income Trading System 1.0 

Google Inc. Mountain View, Calif. | www.google.com 1998 Sergey Brin,LarryPage Private Web Search, Google Site Search 

HarvestRoad Ltd. Claremont, Western www.harvestroad.com ) 1996 Grame Barty Public HarvestRoad Wizard 2.0, HarvestRoad 

Australia Publisher 1.3, HarvestRoad DPMS 1.2 

IDFM Inc. Burlington, Mass www.idfm.com ) 1996 Steve Parrella Private Process Innovator 3.0 

NetDecide Inc. Falls Church, Va www.netDecide.com 1996 C.C. Chang Private Decision Server, AdvisorDecide/Personal 
Decide/PlannerDecide, IntelliDecide 

OpenReach Inc. Wakefield, Mass. www.openreach.com 1999 Mark Tuomenoksa Private TrueSpan 


Saba Software Inc. Redwood Shores, Calif. www.saba.com 1997 Bobby Yazdani Public Saba Learning Enterprise, Saba Learning 
E-Store 4.0, Saba Learning Exchange 4.0 


Etrieve Inc. Hillsboro, Ore www.etrieve.com 1998 Mike Maerz, Ash Gupte Private M3 Mobile Message Management 1.0 


W-Trade Technologies Inc. New York www.w-trade.com 1997 DonnaR. Oliva, Private w-Trade Wireless Securities Trading 4.01, 
Sergey Fradkov w-Bank Wireless Banking 4.01, w-Store 
Wireless e-Commerce 1.0 


Wysdom inc. Richmond Hill, Ontario www.wysdom.com : 1998 Kashif Hassan Private mMobilize, mPortal, mShop 
XcelleNet Inc. Atlanta www.xcellenet.com E 2000 D. Crumpler Private RemoteWare, Afaria 


Aelita Software Corp. Powell, Ohio www.aelita.com 1998 Ratmir Timashev Private Domain Migration Wizard 5.0, Enterprise 
Directory Reporter 4.0, ERDisk 5.0 

DataCore Software Corp Fort Lauderdale, Fla. | www.datacoresoftware.com 1998 George Teixeira Private SANsymphony 1.0 

Ecora Corp. Portsmouth, N.H www.ecora.com 4 1999 Alex Bakmar Private Ecora Documentor 1.0, My Ecora1.0 


Entelagent Software Corp Agoura Hills, Calif www.entelagent.com 1996 John D'Angelo Private SAMS Surveillance System 2.2, 
SAMS E-Mail Warehouse 2.1 
Netarx Inc. Bingham Fa ch. www.netarx.cor 3 1997 Sandy Kronenberg Private NMS Remote Network Monitoring 1.0 
The Ticketer 4.0, RESNet 2.0 
Netier Technologies Inc. Carrollton, Texas www.netier.com 1997 James V. Crocco Private NetXpress Information Appliances XL1/2000, 
Rapport Administrative Software 2.0, 
Application Embedding Services 1.0 
Orillion Corp. stor www.orillion.com 4 1995 Jerry R. Sellers, Private OVista 4.1, OVantage 2.0 
Terry P. Lindsey 


Response Networks Inc. North Andover, Mass. | www.responsenetworks.com 1999 Ivan Shefrin Private ResponseCenter 2.5 


Arcot Systems Inc. Santa Clara, Calif www.arcot.com 1997 Ram Varadarajan Private Arcot WebFort 3.0 

Authentica Inc. Waltham, Mass www.authentica.com 1997 David Pensak Private PageVault, WebVault, MailVault 
BioNetrix Systems Corp. Vienna, Va www. bionetrix.com 5 1997 Peter Bianco, Karl Ware —_- Private The BioNetrix Authentication Suite 3.1 
Sanctum Inc. Santa Clara, Calif. www.sanctuminc.com 1997 Eran Reshef Private AppShield 2.5, AppScan 1.0, AppAudit 
Securant Technologies Inc. San Francis www.securant.com 1997 JontiMcLaren, Eric Olden Private ClearTrust SecureControl 4.2 


Adero Inc. Bostor www.adero.com 1998 Paul Cheng, Robert Carney Private GlobalWise 1.5 


CacheFlow inc. Sunnyvale, Calif www.cacheflow.com 1996 Michael Malcolm Public CacheFlow Internet Caching Appliances 3.0, 
CacheFlow Content Manager 1.0, RealProxy 
for CacheFlow 1.0 


CoreExpress Inc. St. Louis www.coreexpress.com 1999 Michael Gaddis Private Internet Data Exchange System 1.0 


Evoke Communications Inc. Louisville, Colo. www.evoke.com j 1997 Paul Berberian Private Evoke Webconferencing, Evoke Webcasting, 
Evoke Talking Email 


Interwoven Inc. Sunnyvale, Calif www.interwoven.com 48 1995 Peng Ong Public TeamSite 4.2, OpenDeploy 4.2, TeamSite 
Templating 4.2 


Kinecta Corp. San Francisco www.kinecta.com 1998 David Mathison, Private Kinecta Interact 3.0 (includes Kinecta 
Adam Souzis, Arthur Do Interact Server and Kinecta Interact 
Subscriber) 3.0, Kinecta TrafficRegister 3.1 


Nishan Systems San Jose www.nishansystems.com ) 1998 Aamer Latif Private SolP, Series 2000, Series 3000 


Packeteer Inc. Cupertino, Calif www.packeteer.com 2 1996 Brett D. Galloway, Public PacketShaper 4.1, AppVantage 4.2, 
Robert L. Packer Application Acceleration Line 1.0 


ProactiveNet Inc. Alviso, Calif www.proactivenet.com 3 1997 Ajay Singh Private ProactiveNet 3.5 
TopTier Software Inc. San Jose www.toptier.com 1995 Shai Agassi Private Top Tier eBusiness Integration Portal 3.0 


VMware Inc. Palo Alto, Calif www.vmware.com 1998 Mendel Rosenblum Private VMware 2.0 for Windows NT and Windows 
2000/VMware 2.0 for Linux 2.0.1, VMware 
server products 

Yipes Communications Inc. San Francisco www.yipes.com 200 1999 Peter Kaminski Private Yipes MAN 1.0, Yipes NET 1.0, 

Yipes WAN 1.0 


NOTE: * Extensibility was acquired by Tibco Software Inc. in August. ** GetThere is under agreement to be acquired by Sabre Holdings Corp. *** OnLink was acquired by Siebel Systems Inc. in August 
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Response Networks: 


Tracking Web App Performance 


BY MARK HALL 

Dick Vandenberg thinks his scalded-dog 
theory explains why Alexandria, Va.-based 
Response Networks Inc.’s service-level 
agreement management tools will make the 
transition from the S/390 mainframe, where 
he uses them now, to the Internet. 

The vice president and manager of branch 
automation at First Tennessee Bank NA in 
Memphis says that in the world of service- 
level agreements, subjectivity is unaccept- 
able but inevitable among end users. “So I 
need to know whether the application is run- 
ning like a scalded dog or slowing everyone 
down big time.” And the cold, hard facts he 
gets in reports from the vendor’s response 
center let him know precisely how things are 
running. 

Pulsar, the latest product entry from Re- 
sponse Networks, uses Jini and Java technol- 
ogy to report on application response time 
across the Internet. Response Networks is 
licensing Pulsar to large Internet providers 
that will offer the service to users like First 
Tennessee Bank, which has already done 
some testing with the product. 
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John McConnell, princi- 
pal analyst at McConnell 
Associates in Boulder, 
Colo., says, “They've got a 
real solid business plan 
and technology.” 

Richard L. Ptak, an ana- 
lyst at Hurwitz Group Inc. 
in Framingham, Mass., 
agrees, adding that Re- 
sponse Networks founder 
Ivan Shefrin and CEO Ted 
Joseph are impressive 
managers. “I speak to a 


CEO Ted Joseph: lot of bright people in the 
Solid business plan industry, and Response 

Networks has some of the 
most exciting, leading-edge thinkers in the 
industry,” Ptak says. 

That technology and management combi- 
nation inspired a recent multimillion-doilar 
investment from Cisco Systems Inc. Accord- 
ing to Cisco Vice President Eugene Lee, 
Response Networks has strategic technology 
in an area the San Jose-based networking 
giant “wants to learn about.” d 


Arcot Systems: Securing Web Identities 


BY LEE COPELAND 

Founded in 1997, Arcot Systems Inc. makes 
software that tackles the tricky task of verify- 
ing digital identities on the Web. The Santa 
Clara, Calif.-based start-up sells its Internet 
security software to e-commerce, health care 
and financial companies. 

Arcot’s WebFort software combines digi- 
tal certificate technology 
with an encrypted secur- 
ity key technique called 
Cryptographic Camou- 
flage, which works by 
hiding a user’s encrypted 
security key among sever- 





Chet Silvestri, CEO 3 
of Arcot Systems al fake keys. In competing 


security systems, an en- 
crypted key can be decrypted by searching 
through the key space for one authentic, 
readable key. In Arcot’s security scheme, ali 
the keys in the key space are readable, but 





only one unlocks access to a Web account. 
After three failed attempts, the user or po- 
tential hacker gets locked out of the system. 

“Tt’s similar to leaving 1,000 keys beneath 
the doormat,” says Marlin Gilbert, vice presi- 
dent of business development at Arcot. “All 
the keys look like they fit the lock, so the 
thief has to go through each one to find the 
right fit.” 

James Hurley, an analyst at Aberdeen 
Group Inc. in Boston, says Arcot’s technique 
would foil a potential hacker through sheer 
exhaustion. “The time required to guess all 
1,000 keys would take a lifetime,” he says. 

Chet Silvestri, former president of Sun 
Microsystems Inc.’s microelectronics unit, 
was brought in as CEO of Arcot in July. In 
August, Arcot raised $21 million in fourth- 
round funding, bringing its venture capital 
total to more than $40 million. 

The company employs 125 people.» 
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FRANK HAYES/FRANKLY SPEAKING 


Taking the Gamble 


>> How to choose an emerging company survivor. 


Face it: New technologies are a gamble. And choosing 


an emerging company as a vendor is an even bigger gam- 


ble. When we peg IT plans on a new or rapidly evolving 


supplier, we aren’t just betting on that vendor’s ability to 


deliver. We’re also betting on its survival. 


So why do it? Why take the 
gamble? The answer goes to the 
core of what IT means in busi 
ness today. Corporate IT is 
where increased productivity, 
efficiency and effectiveness 
must come from. If we in IT 
can’t deliver more, better, faster, 
cleaner, more timely and more 
useful information — well, we'll 
be swept away by competitors, 
by new ideas, by alternatives we 
never saw coming. 

Same-old, same-old won't do 
it. Either we find new 
ways to use existing 
technologies, or find 
new technologies. 

Like with any gam- 
ble, there’s risk. But 
the more questions 
you can answer, the 
better the chance that 
gamble will pay off. 

Ask yourself — and them: 

# Will this vendor survive? 
How’s the capitalization? What’s 
the burn rate? How quickly is 
the vendor collecting customers? 
Great ideas and technical talent 
do you no good if the vendor 
goes belly up 

® Will the products you buy con- 


tinue to be developed? Small 
vendors like focusing on one 
thing at a time. If this vendor is 
suddenly more enthusiastic 
about a new, different product, 
you could be facing a dead end. 
# Will these products continue 
to be supported? Maybe a dead 
end is OK — but only if you can 
get the source code, hardware 
specs and other information 
you'll need. 
® If this vendor is bought by a 
larger company, will you be 
forced to switch to the 
larger vendor’s product 
line? 
® Is the infrastructure 
in place — training, 
user groups and con- 
sultants who know the 
product — to support 
you? 
® Are third-party vendors on 
board? Their commitment is a 
good sign that they think your 
emerging company’s product 
will survive. Remember, suc- 
cesses travel in packs. 
8 What are this vendor’s plans to 
license out its new technology? 
No, not this year — but down 
the line, it’s in your interest to 


REMEMPER THAT HOT 
VENDOR You SIexteD 
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have multiple suppliers. And un- 
less they can grow faster than 
the market, you could find your- 
self with Betamax technology in 
a VHS world. 

® Or is this vendor more interest- 
ed in licensing than producing 
products and building market 
share? Maybe you should look to 
one of its licensees instead. You 
want a product, not a loss-leader 
from an idea factory. 

= If the product is hardware, 
who’s actually manufacturing it? 
Quality matters, and you want 
some experience behind how 
it’s built. Start-ups can buy that 
experience by farming out man- 
ufacturing to a third party, or by 
bringing in expertise through 
their management team. But 
make sure somebody knows how 
not to build lemons. 

® Finally, what do your own 
technical people think? They’ll 
have to learn, implement and 
maintain the product. They hear 
scuttlebutt, and they know 
what’s failed before. If they think 
it’s a dog, it probably will be for 
your company. And no matter 
how well it works somewhere 
else or how good this bet looks 
on paper, that’s a gamble you 
can’t afford. D 


Hayes, Computerworld’s senior 
news columnist, has covered 

IT for more than 20 years. His 
e-mail address is frank_hayes@ 
computerworld.com. 


POPS& 
DROPS 


Last April’s technology stock 
sell-off may have put a damper 
on initial public offerings (IPO), 
but while the number of tech 
companies going public has 
dipped, the money being raised is 
holding steady compared with 
last year. Take a look at these 
IPO stats: 


» In 1999, 543 companies went public. 
As of last month, 396 companies had 


gone public. 
SOURCE: THE WALL STREET JOURNAL 


» IPOs have raised $73.7 billion as of 
last month, compared with $68.8 billion 
inall of 1999. 


SOURCE: THOMSON FINANCIAL SECURITIES DATA 


» First-day price pops averaged 64% 
as of August, down slightly from last year's 
68% average first-day gain. 


SOURCE: THE WALL STREET JOURNAL 


» Percentage of Computerworid's 100 
Emerging Companies to Watch 2001 that 
were public when they were chosen for this 
year's list: 15%, 


>» Percentage of companies that were 
public when Computerworld chose them 
for Emerging Companies 2000: 12%. 
Best first-day IPO 

in overall market for 2000 
>» WebMethods Inc. went public Febru- 
ary at an offer price of $35. Its first-day 
close was $212.63, for a return of 508%. 


Best first-day IPO 
in overall market for 1999 


» VA Linux Systems Inc. went public 
December 1999 at an offer price of $30. 
Its first-day close was $239.25 for a return 
of 698%. 


Best first-day IPO for 
Emerging Companies 2001 


SOURCE: HOOVER'S ONLINE 


» CacheFlow went public November 
1999 at an offer price of $24. Its first day 
close was $126.38, for a return of 427% 
(and it continued to shine; its third-quarter 
2000 close gave a 496% return). 

Best IPO in the 

overall market for 2000 

» Marvell Technology went public in 


June at an offer price of $15. Its price in 
October was $84.56, a return of 463.8%. 


Best IPO in the 

overall market 1999 

>» Commerce One Inc. went public 
July 1999 at an offer price of $21. Its 
end-of-year price was $196.50, fora 
return of 2,707%. 


SOURCE: HOOVER'S ONLINE 


Best IPO Among Emerging 
Companies 2001 

» Interwoven Inc. went public October 
1999 at an offer price of $17. Its third-quarter 
2000 close was $113, fora return of 565%. 





it’s what you can expect 
from Emtec’s e-Business solutions. 


lay at ebiz@emtecinc.com or call 1-877-410-4999 ext. 605. 


REGIONAL 4 e-business simplified 
SYSTEM PROVIDER www.emtecinc.com 





Did you really pay all that money 


fo reset passwofds? 


Forgotten passwords cost companies money. Big money. In fact, it’s estimated password management 


costs American business at least $200 per person per year. 


Integrated with a middleware product, Iridian Technologies’ new Authenticam™ with Private ID™ software 
eliminates password problems forever while enhancing information security. A solution that can pay 


for itself in as little as one year while limiting access to sensitive information to authorized personnel. 


Authenticam uses iris recognition, the most accurate, stable, scalable, and non-invasive human authentication 


technology in existence. Iridian’s exclusive Private ID” provides the ultimate in security and user privacy. 


Easy and convenient to use, controlled access to workstations, servers, LANs and WANs starts with a 
glance at a camera 18-20 inches away. Authenticam also incorporates high-resolution videoconferencing, 
facilitating collaboration and adding multi-level secured communications simply not available with 


other authentication devices at any price — let alone for the price of a regular videoconferencing camera 


Authenticam and Private 1D can help manage IT related costs while enhancing information security. 


For more information call 1-866-IRIDIAN or see www.iridiantech.com. 


9 East Stow Road, Suite F, Marlton, NJ 08053-3159 USA 
1 866 IRIDIAN www.iridiantech.com 
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ATE ONE NIGHT, a lone, armed figure 
breaks into an unmanned lobby. A voice 
overhead tells him to stop and await his 
arrest. Seeing no one, the spy darts to- 
ward the elevator. Thirty miles away, a 
security guard fires an encrypted com- 
mand over the Internet. A second later, 
the lobby explodes in a spray of bullets. 
There’s a war brewing in cyberspace. 
Make that a Netwar, so dubbed in Coun- 
tering the New Terrorism, a book pub- 
lished last year by The RAND Corp., a Santa Moni- 
ca, Calif.-based nonprofit research group formed 
during World War II. 

It'll be a long time before remote-controlled ro- 
bots fight battles to keep intruders out of office 
buildings (though unconfirmed reports circulated 
among security newsgroups in September did 
claim that a company in Thailand has invented a 
gun-toting robot directed through a remote-con- 
trolled camera). 

But many players, including the government, 
RAND and Winn Schwartau, a security analyst in 
Seminole, Fla., say this information war is already 
upon us. And in his Internet survival book, Cyber- 
shock, Schwartau claims that some private corpora- 
tions are already launching military-style counter- 
attacks to protect their interests. 

Rumors and off-the-record tales abound, but 
there has been only one recorded account of a true 
military-style cybercounterstrike from the corpo- 
rate sector. 

It happened during the World Trade Organiza- 
tion (WTO) summit in January. San Jose-based 
Conxion Inc., which hosted the WTO server, was 
hit by a denial-of-service attack launched by the 
Electrohippies (E-hippies), a U.K.-based online 
activist group. 

Conxion traced the IP trail directly back to the 
E-hippies server and read postings encouraging 
E-hippies to mail-bomb the WTO. Instead of drop- 
ping those incoming packets at the router like 
most companies do to stop denial-of-service at- 
tacks, Conxion volleyed them back at the E-hippies 
server, swamping it for several hours. yn was 
so proud of its defensive tactics that it issued a 
press release. 

Chris Malinowski, the recently retired lieutenant 
commander of the New York Police Department's 
Computer Crime Squad, says “returning mail to 
sender” doesn’t constitute a crime. But many infor- 

Continued on page 74 
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| Hacking tools are proliferating among non- 
hacking tech products. But when should 

you be an online vigilante, and when should 

you wait for the law? By Deborah Radcliff 
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Internet Security Advisors 
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mation technology professionals say 
they wouldn't risk taking such an ac 
tion, even if they had explicit proof of 
attack. 

The chief concern is accidentally 


the source of the 


slamming innocent sites through 
which hackers have routed their at 
tacks to conceal their tracks. 

“My fear scenario is that U.S. gov 
ernment agencies [involved in infor 
mation v ire} will build in react ca 


pabilities,” says John Pescatore, 


lyst at Gartner Group Inc. in Stamford, 


Conn. “A smart hacker will launch a 
[denial-of-service] attack using 
agencies’ IP addresses, z they all 
start attacking each other. The worst 
case is Amazon shoots eBay who 


those 


shoots the IRS who shoots Cisco who 


shoots . 


an ana- 


charges 


Another concern is liability. 

“Launching a counterattack is very 
difficult because of all the liability is- 
sues that come up,” says Pete van de 
Gohm, director of information asset 
protection at Enron Energy Services 
Inc. in Houston. “Like, what if the at- 
tack comes from a boundary outside 
the United States and I act 
Does that constitute an act of war?” 
an editor at the San 
mputer Security 


against it? 


Richard Power, 
Francisco-based C 
Institute, says most company execu- 
tives with fiduciary responsibilities to 
their stockholders, government regula- 
tors and attorneys would never expose 
themselves to civil and criminal 
allowing counterattacks. 

Although no hot information war 
as broken out yet, there are clear in 


SECURITY ANALYST WINN SCHWARTAU claims that some 
private corporations are already launching military-style 
counterattacks to protect themselves against hackers 


cators in the vendor and IT communi 
ties that IT security is shifting beyond 
passive firewall protection to a more 
active defense. 

“I’m not sure about fighting back in 
terms of [counterattacking], but in 
terms of defending yourself, we’re just 
beginning to scrape the surface of de- 
fensive measures and tools,” says Ruth 
a specialist in information 
security at Predictive Systems Inc., a 
New York-based systems integrator. 


Lestinz 


Defensive Tactics 

Tool vendors are t 
hacker traps and tracers. Network Ice 
Inc., Recourse Technologies Inc. and 
Network Flight Recorder Inc. (NFR) 

| market IP tracking tools that can 

ace the route of an attack. Th 
decoy network boxes (fondly re- 
ferred to as “honey pots”) that identify 
an attack and limit it to a punching-bag 
server that looks like the larger net- 
work but isn’t connected to it. 

In addition, some Linux products, as 
well as the FreeBSD open-source Unix 
variant, ship with full bags of hacking 
tools, including Trojan horses (hidden 
executable programs) and port scan- 
ners that can be used to trace the tech- 


ginning to push 


also 
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Launching a 
counterattack is 
very difficult 

‘ause of all the 
liability issues. 
PETE VAN DE ome DIRECTOR OF 


INFORMATION ASSET PROTECTION, 
ENRON ENERGY SERVICES INC. 


niques and footprints of the hackers 
involved in an attack. 

Rockville, Md.-based NFR, which 
markets its products as “clue-gathering 
tools for network and security man- 
agers,” offers a souped-up intrusion- 
detection system that includes a “net- 
sics” element with data- 
traffic analysis and limited trace-back 
capabilities. NFR also has a product 
called BackOfficer Friendly, which sets 

Continued on page 78 
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Networking traffic is exploding. So when you're building a ‘network, 

performance has to come first. That’s why at Foundry es Se we 
make the world’s fastest networking solutions. So far, over 2.500 customers 
have chosen our record-breaking, award-winning Netlron Internet 
Routers, Biglron Layer 3 Switches, and Setverlron Laver 4-7 Web Switches. 
; Its how AOL, US. Army, Cable & Wireless, and Exodus power their 
\ PPE Co pbre sole ESWConn Lem Colm cemcnls Coss morr inate ae: Tn tiers (ht largest Internet and 
Metro, Service Provider networks. Enterprise networks. Even highly 
complex hosting facility networks. We CS omteratiae | Maelo lori t eae amcoyoMeretcisre maCaT ap 
unbeaten performance and reliability, backed “up with global service and support. 


Because today. if you don’t think fast, you're not thinking. Call 1.888: TURBOLAN 
887-2652 
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The Web Magazine for IT Leaders Implementing Windows 2000 and Windows NT with Compag Services and Solutions 


POINT OF VIEW NEWS > 


ans Retiaienai Caailitashteiiiaaiiiad Compag servers asserting worldwide sales 


Microsoft redefining enterprise storage superiority, topping TPC-C benchmark tests 


Seek on ee ee ane _ Compaq servers are generating more and more momentum 
Storage (NAS) appliance from Compaq makes while riding the Windows 2000 wave. Their quarterly market 
a ee share of unit shipments recently rose 4.4% from Qi 2000 to 
wereereeneConedeeringncompoy Q2 2000 throughout the world and ProLiant-based systems are 


09-29-00 _tasksmart.asp/3 : 2 
"2 its dominating the TPC-C benchmark performance record books, 


1 
a — ; where they currently occupy five of the top 10 slots. As a result 
TECH EDGE of this positive trend, industry observers are increasingly 
regarding Compaq as a leading PC and server company, not just 
Microsoft and Compaq take aim at a leading PC company. 

| 


ASP model 


erect pas Comens ne oe For the full story, visit: www.windows2000advantage.com/ 


array of product and support offerings. This momentum/11-06-00_servers.asp/300 
article looks at Microsoft and Compaq and 2 
the rapidly emerging ASP environment. 


10'25-00.aim-st-espaspiso0 no CASE STUDY > 


—— Windows 2000 Group Policy can cut support costs, 
Q&A but requires up-front planning, training and testing 


Microsoft VP Jim Ewel portrays Windows The Group Policy features within Microsoft Windows 2000 can make it 
2000's role in the business Internet easier to fine-tune user access rules and even lock down desktops so 
Jim Ewel, vice president, Windows .NET users can't fiddle with their systems. But moving to Group Policy from 
server marketing, has played an important : ‘ : : 

role in some of Microsoft's prominent prod- the Microsoft Windows NT 4.0 domain structure requires a lot of plan- 


ucts. He discusses initiatives, which revolve j ini i 
around Windows 2000 and .NET. ning, training and testing. 
www.windows2000advantage.com/qa/ 


10-06-00_role.asp/300 For the full story, visit: www.windows2000advantage.com/ 
case_studies/11-06-00_grouppolicy.asp/300 


COLUMNS MOMENTUM > 


Implementing service levels key to 


.NET success As Windows 95 phases out, Microsoft and 


in Gan Francises, The NET platiorm evolves. Compag offer tools to ease the move to 


that is more in tune with the Word Wide Web. Windows 2000 Professional 
ae ee Five years after its introduction, Microsoft Windows 95 is near- 
“ ing retirement. For business customers still running Windows 95, 
upgrading to Microsoft Windows 2000 Professional will create 


%e . CASE STUDIES far more stable and manageable client workstations. Microsoft 
- and Compaq are offering a variety of software tools and services 
Windows 2000 fever can be infectious. Just to ease the inevitable migration pains. 


ask Datareturn.com 


After testing Microsoft Windows 2000 icite Anal / 
Advanced Server as part of Microsoft's Joint For the full story, visit: www.windows2000advantage.com/ 
Development Program, Datareturn.com lost momentum/11-06-00_95phaseout.asp/300 

no time migrating its own Web site and cus- PI 

tomers’ shared Web servers. 

www.windows2000advantage.com/ 

case_studies/09-18-00_infectious.asp/300 
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MOMENTUM SERIES > 


Compagq's FutureSourcing manages Windows 
2000, heterogeneous network infrastructure 


FutureSourcing is Compaq's collaborative approach to helping companies 
deliver business results by providing IT infrastructure management servic- 
es. With FutureSourcing, Compag minimizes the client company’s risk of 
managing new technology by providing resources that leverage new tech- 
nology, speed time to market and reduce constant retraining. 

The specific desktop, applications, Internet and enterprise infrastructure 
operations management services offered by Compaq's FutureSourcing pro- 
fessionals include the following: 


¢ Implementation and management of Microsoft Windows 2000 and 
other enterprise applications 

* Rapid deployment of networked infrastructure to support 
new environments 

* Operations management of enterprise networks 

¢ Custom help-desk services 


With Compag Global Services’ methodology, FutureSourcing offers cus- 
tomers specific benefits, such as the following: 


¢ Agility - Enabling customers to respond quickly to changing 
business opportunities and conditions 

* Focus — Enabling customers to spend more time on where they 
need to go and less time on how they get there 

¢ Value - Accelerating RO! by leveraging Compag expertise, 
experience, resources and economies of scale 

* Control - Gaining control through standardization 

¢ Results — Achieving immediate objectives, while establishing 
a flexible framework for long-term advantage 


For the full story, visit: www.windows2000advantage.com/ 
momentum/10-23-00_futuresourcing.asp/300 


QUOTE OF THE WEEK > 


“Third-party vendors all say they're 
Windows 2000 ready, but if you don’t 
| do a test, you'll be in trouble.” 


— John Wolfe 

systems analyst in 

Energy Wholesale Operations 
Entergy Corp. 
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What is Windows 2000 Advantage? 


The mission of Windows 2000 Advantage is to become 
your primary source of timely, useful information for planning 
and implementing Microsoft Windows 2000 on Compag solu- 
tions and services. 

Windows 2000 Advantage is a Web-only magazine because 
that lets us bring you, the IT leader, great stories that apply to 
your day-to-day work. We'll keep you up to date with a weekly 
e-mail alert so you don't miss a thing. 

Windows 2000 Advantage is underwritten by Microsoft 
and Compaq. Its charter is to address the issues that most 
concern !T managers charged with keeping their companies on 
top of the latest and best solutions Microsoft and Compaq 
have to offer. Toward that goal, we offer a wide range of stories 
including case studies, columns and news to provide you with 
information you can't find anywhere else. 
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QUICKPOLL > 2% 


1 Year 


How long of a lifecycle 
should a client-based 
operating system have? \ 26% 


\ 5 Years 
| or More 


15% 


4 Years 


Cast your vote now at: 
www.Windows2000Advantage.com/300 Base: 297 Respondents 
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Continued from px 
up a fake session when it detects some 
one trying to install Back Orifice (a re 
mote monitoring program) and logs 
the IP address of the attacker and any 
operations he tries to perform 

In addition to vendors, IT managers 
are also trying to build more reactive 
capabilities, according to Lestina. She 
says that more than two-thirds of Pre 
dictive’s customers are looking for 
ways to get the upper hand with cyber 
attackers, and that includes trapping 
and tracing their activities. 

Say my site is brought under attack 
from your university, and I have an au 
tomated system that returns a message 
to the attacker saying, ‘] detect this; | 
don't like it; I know where you live; 
and if you attack us again, you'll get a 
note from our lawyers,’ ” says Marcus 
Ranum, NFR’s chief technology officer 

“We call it covert security. When 
these attacks are spoofed and hidden 
through the Internet, you need to root 
them out at the network layer,” says 
Frank Huerta, founder and president of 
Palo Alto, Calif.-based Recourse Tech 
nologies. “It’s about finding where the 
attack is coming from and damming it 


up at the source.” 


Slippery Slope 

But trapping and tracking also pose 
some interesting legal questions con 
cerning issues such as trespassing, en 
trapment and invasion of privacy. 

Following an IP address across the 
Internet means passing through every 
server the attacker originally compro 
mised. Since each of these servers is 
privately owned, you need permission, 
or else you're trespassing. 

“There’s nothing wrong with doing a 
Traceroute [a tracking program] back 
to the IP address, so long as you alert 
the administrator,” explains Ira Win 
kler, president of security consulting 
firm Internet Security Advisors Group 
in Severna Park, Md 

In his book Tangled Web, Power 
asserts that as far back as 1994, when 
the U.S. Air Force Research Laborato 
ry in Rome, N-Y., was under attack, 
agents grappled with just how far to 
track the attacker through a maze of 
private servers. 

“To chase a hacker, you're going to 
digitally break and enter and trespass 
to follow the trail,” Power says. “Re 
member that incident in which a bur- 
glar fell through a sunroof, sued and 


BUSINESS 


Back? 


won [the lawsuit over the incident]? If 
a burglar can sue the people he’s bur 
gling, a hacker can turn around and 
sue a Fortune 50 company for invading 
his privacy, violating his space, causing 
him fear, whatever.” 

Antihacking tool vendors have at 
least considered trespassing when de- 
signing their tools. But the effectiveness 
of those tools is still open to question 

In order to get the bad guys, the 
traces must occur during a live con 
nection. How, then, does a product like 
Recourse Technologies’ ManHunt 
track attackers in real time while stop 
ping at each server to ask permission? 

Huerta waffles on ManHunt’s tech 
nical workings, citing “intellectual 
property concerns.” But he does say 
that if a company using ManHunt fell 
under attack, one of two things would 
happen: ManHunt could pass a digital 
ly signed e-mail message upstream to 
the predesignated point of contact at 
the service provider, which would re- 
quire the recipient to read the mail and 
decide what action to take, sapping the 
tool of some of its value. Or, if the up- 


stream Internet service provider were 
primarily running ManHunt nodes, it 
could conceivably route the trace 
automatically and in real time. But 
Recourse has a lot of selling to do to 
make that happen 

It’s that kind of cooperation that 
will result in “cutting attacks off at the 
source” to provide a significant limiting 
of hack attacks, as ManHunt literature 
claims. But perpetrators will be cut off 
the Net only at the behest of the Inter- 
net service provider that actually serves 
the perpetrator, which is also the final 
destination of the IP tracking software 

Van de Gohm heaves a sigh of exas 
peration at antihacking tool vendors’ 
cloak-and-dagger claims and the foggy 
goals behind them. Any basic network 
can do what these tools claim, he con- 
tends. Firewalls log all incoming IP 
addresses, which can be used to start 
a trace. And network monitors can 
track an attacker's activities in the 
network, unless he erases the system 
logs, of course 

“In the government, there are a 
number of reasons to detect, catch, 
rap and prosecute cyberattackers,” 
van de Gohm says. “But in the private 
sector, you've got to ask yourself the 
bottom-line question: Does this en- 
hance shareholder value?’ 

Huerta says the products do offer 
value beyond the ability to trap and 
prosecute. For example, he says, they 
can tell an administrator in New York 
what's going on in the company’s Syd- 
ney, Australia, data center as well. D 


Know Your Culprit 


Criminal suits are tough to prosecute, so your evidence must be legally bullet- 
proof, both factually and procedurally, says Ira Winkler, president of Internet 
Security Advisors Group, who has assisted law enforcement during computer 


crime investigations. 


It’s much better to gather your own evidence for a civil suit, he adds, because 
then it’s much easier to prosecute. Whether using commercial tools or other 
techniques to trap and track an attacker, the important thing is to provide evi- 
dence that couldn’t have been tampered with. Winkler suggests the following: 

When you detect an attack, dump all logs to read-only tape so you can 
= prove that the data hasn't been tampered with. 


Use a line analyzer that records the attacker's session keystrokes in a 
= read-only format to provide evidence of what the attacker was trying to 


do inside your network. 


Don't threaten the attacker; instead, alert the police. You don’t want to 


« escalate a hacking war. 


4 Don't hack back. “If you do anything that can be perceived as intrusion or 
« denial-of-service and you contact the police, you've just made it really 
easy for the police to arrest you,” says Winkler. 

If you do report the crime to the police, be prepared to show law enforce- 
ment that the cost of the crime meets the investigative threshold, which 
varies, depending on the law enforcement agency involved, says Richard Pow- 
er, an editor at the Computer Security Institute. “It’s got to look like you lost 
some money,” he says. - Deborah Radcliff 
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It’s about finding 
where the attack 
is coming from 
and damming it up 
at the source. 


FRANK HUERTA, PRESIDENT, 
RECOURSE TECHNOLOGIES INC. 





Most servers replace yesterday's servers. This one replaces tomorrow's. 


Introducing hp 9000 superdome, the first enterprise server with the flexibility to match its power. 
Flexibility that’s ready for |A-64, and flexibility to run multiple operating systems like HP-UX, Linux, Windows 
2000; and others yet to be. Capacity is flexible too. Scale it up or scale it back, paying less when you use less. 


With hp 9000 superdome, your options are open. Because tomorrow's another day. hp.com/superdome 
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If you could do it all over again, would you? 

It’s a question everyone has asked himself at one 
time or another, and it often lies somewhere between 
being a frustrating, futile exercise and a valuable 
learning experience. But still, it’s hard not to go there. 

Charlie Lacefield, who retired last year as Midland, 
Mich.-based Dow Corning Corp.’s CIO, spent some 
time with Computerworld’s Melissa Solomon, hashing 
over his own “what-if” scenarios. In hindsight, he says, 
there are areas he could have improved at Dow by tak- 
ing another approach, just as there were those projects 
for which he chose the right path and learned a great 


deal in the process 


Looking back on your career, what would you say are 
the most critical responsibilities for a ClO? | would 
define the job as part overall technology responsi- 
bility, part process responsibility, and the third 
piece, which should not be underestimated, is the 
people responsibility. I think a lot of CIOs come 
into the position with really strong IT technology 
capabilities, and they’re maybe not quite as strong 
on the process side and possibly weak on the 
people side. And that’s where I think people fail, 
because they don’t recognize what I call the 
unique needs for people in IT. 


Such as? IT tends to be a group of people who are 
isolated. It’s easier for them to interface with a 
computer screen sometimes than it is for them to 
interface with people. It’s very important to get 
your IT people to relate to the business world and 
be part of the business world 


Did you ever struggle with an employee who just 
couldn’t grasp that? The answer to that is yes. I 
would put these people into a position where 
they could work alone, and we would just draw 


WHO IS HI 
Charlie Lacefield, 60, retired 
last year from Dow Corning 
after 36 years in various 
leadership positions. He now 
lives in North Carolina and, 
despite his so-called retire- 
ment, serves as president of 
Phios Corp., a Cambridge, 
Mass.-based process reposi- 
tory services firm that was 
spun off from MIT. 


on their skill base but not expect them to be 
part of the decision-making group 


What should a CI0’s top management priorities be? | 


think one of the most important activities that the 
CIO has to lead is the setting of a vision and a 
strategy for IT. That can’t be left to consultants or 
to the organization. The leadership must come 
from the CIO. Then I think it’s important to take 
that vision and strategy and reduce it to a deliver- 
ables map. 

I found that you’ve got two things you can 
deliver on a broad basis in IT: You can deliver toa | 
time line or you can deliver to the full scope ofa | 
project, and if I had to err on one, I'd err on deliv- | 
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ering to the time line, even if I had to reduce the 
scope. You've just got to say, “Move on.” It’s one 
way to keep the cost structure under control. 


Any projects you wished you had stepped back from 
sooner? | think at the end of it all — I was reflect- 
ing on this the other day — it seems like there’s 
trade-offs or balances between centralization and 
decentralization of the IT capability. And I believe 
that in Dow Corning, when I first got into the 
organization ... we were too heavy on the decen- 
tralization and not heavy enough on the central- 
ization. As an example, we had had computing 
centers in the U.S., Europe and Asia. We wound 
up with the computing center, the hardware piece, 
only in the U.S. 


Why was that? It was economical to do it. Running 
one set of computers is a lot cheaper than running 
three [sets of ] computers. It was kind of stepwise, 
so every time that we took a step, we could see 
the next step was clearer. And Dow Corning was a 
shop when I took over that was “build your own” 
in terms of systems, and we made a major deci- 
sion to purchase rather than to build. I started 
with the SAP implementation, and once you have 
that framework of a common system, it becomes 
clear where centralization can help. 


Are there skills you wished you had further developed in 
your career? In order to have felt better prepared 
for the CIO job, if I had had more in-depth IT 
skills, I certainly would have felt that way. But I 
realized going in that I didn’t have the depth of IT 
skills, so I was sure to build a staff of people 
around me that covered for that weakness. 

You've got to have enough understanding of 
what the question is so that you're not going to 
get fooled by what people are asking. 


How would you have gone about learning such skills 
quickly? Actually, the way I wound up doing it 
seemed to me to be effective in hindsight. I spent 
a lot of time with what I would call outside, exter- 
nal organizations. We became part of the Center 
for Information Research, which gave me some 
insight. We were members of the Information 
Management Forum, which is another fine organi- 
zation; it has a lot of companies that belong to it 
that share in a practical sense what they’re doing. 
And I just found that being part of some of these 
external organizations was a much more effective 
way of learning it than trying to learn it internally. 


You talked about how important it is to set the right 
tone. What was the tone you were going for? The 
tone was [to] start with customer satisfaction. 
And the tone was adding value to the business - 
and, in fact, for IT people to be very comfortable 
with IT projects being led by businesspeople. 
[Otherwise] you wind up working on bells and 
whistles that ought to be challenged, frankly. 


Anything you would have done differently in setting that 
tone? If I were starting over today on something 
like that, I would have rushed to prepare a vision 
and strategy that was embraced by the IT people 
and the business community. [I spent too long] — 
the better part of a year — working on that. Be- 
cause it does set the framework for change — 
change inside your own organization and change 
as to how the IT organization is accepted in the 
corporation. DB 
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A box without service is a box. 
With hp people, hp 9000 superdome becomes a solution, instead of a server. 
Service is comprehensive and included. We handle site planning, integration services, customized training, and monitoring. 
It’s service made simple. So simple, in fact, that we can adjust your capacity over the phone. 


Without, ironically, a service call. hp.com/superdome 
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Prompted by the IT worker’s poor public image and the 
growing shortage of skilled IT professionals, a new media 
campaign hopes to convince kids that this is one exciting 
career field they should get in on. By Erica Manfred 


ITH ALL THE ATTRACTION TO tech- 
nology games, gadgets and instant 
messaging, you'd think teens 
would finally view information 
technology jobs as pretty cool, 

right? Think again. The profession appears to have 

made little headway in remaking its image with kids, 
who still see technology professionals as anything 
but cool. This isn’t good news for workforce experts 
who hope to see more technology workers entering 
the labor pool in the coming years. 

The problem? Image — despite the popularity of 
the Internet with young people. When asked to draw 
their image of a typical technology worker, a focus 
group of middle school students recently portrayed a 
nerdy guy with thick glasses, spiky hair, high-rise 
pants and a pocket protector. The guy was sleeping 
under a desk, because the students said they thought 
technology workers work 24 hours a day. 

“Kids want to play with technology but don’t want 
to be technical workers,” asserts Phyllis Eisen, execu- 
tive director of the Center for Workforce Success at 
the Washington-based National Association of Man- 
ufacturers (NAM). “They want to use computers 
rather than program them.” 

In response to statistics that by 2008, the U.S. will 


require more than 2 million new, highly skilled IT 
workers, the U.S. Department of Commerce’s Office 
of Technology Policy, together with the NAM and a 
number of corporations, is launching GetTech, a 
campaign to inspire teens to prepare for the technol- 
ogy-driven jobs of tomorrow. 

The campaign includes print and TV ads, an infor- 
mation packet available through a toll-free phone 
number and a Web site, Gettech.org. The goal is to 
encourage U.S. students to develop the fundamental 
math, science and technology skills that will enable 
them to take advantage of the high wage opportuni- 
ties in the New Economy. 

The premise of GetTech is that you have to catch 
kids early — and you also have to influence parents 
to encourage their children to pursue IT careers. 

Kamran Khan, vice president of IT at Marist Col- 
lege in Poughkeepsie, N-Y., says he agrees with the 
need for such a campaign. “We need to market infor- 
mation technology more in our schools and provide 
students with a positive spin on a high-tech career,” 
he says. “A good way to do this is to have mentors 
and advisers for the younger generation.” 

A centerpiece of the campaign is a series of public- 
service announcements for TV and radio produced 
by the nonprofit firm Women in Film in Hollywood. 





COMPUTERWORLD November 13, 2000 


The spots aim to overcome the fear factor, which 
Women in Film Vice President Judith Parker Harris 
says is a major roadblock for teens considering high- 
tech careers. “We want to get kids past their fear of 
technology by emphasizing that you'll miss out on 
really cool stuff if you don’t ‘get tech,’” says Harris. 

GetTech will be reaching out to minorities and 
teen-age girls, who are statistically least likely to take 
advanced math and science classes. “Even though it 
was recently reported that girls’ use of the Internet 
has increased 126%, the number of girls saying they 
wanted to go into engineering has actually d 
creased, to under 10%,” Eisen says. 

The TV spot aimed at kids shows a group of rap- 
pers, all nonwhite or female, singing a catchy tune 
about how you could be a millionaire at age 30 if you 
“get tech” (see article, page 84). A spot aimed at par- 
ents shows a bright golden globe floating down from 
the dot in Gettech.org in the sky. The ball lands in a 
parent’s hand, and she passes it on to her child. 

-arents are also intimidated by technology,” Har- 
ris explains. “We're trying to reassure parents that 
they can do it. They can work with their kids in math 
and science. 





ies R hE ma 


*% "7 " © ~ 
Get Tech to Get Rich? 
THE GETTECH VIDEOS produced by Women in Film aim to 
attract kids to high-tech careers by describing the potential 


benefits of employment in the field. The shots above show 
teens delivering that message via a catchy rap song. 
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Get'Tech Drive Draws Mixed Reviews 

What do hiring managers, educators and other information technology labor experts think about 
the GetTech campaign and its role in addressing the IT skills shortage? Computerworld asked 

Ira S. Wolfe, president of Success Performance Solutions in Leola, Pa..; IT recruiter Ernest Ball at 
The Epitec Group in Southfield, Mich.; Kamran Khan, vice president of IT at Marist College in 
Poughkeepsie, N.Y.; and Joanne Kelleher, human resources director at Pinnacle Decision Systems Inc. 


in Middletown, Conn. 


What are the qualities, attitudes 
and skills of entry-level IT hires 
just out of college today? 


Wolfe: The one most significant 
change is that young people look at 
first jobs as opportunities to “try the ca- 
reer on” before taking it home. College 
is only one step in the ladder of career 
achievement. A significant problem is 
gender. Less than 10% of computer 
science majors in college are women 
although they make up over 50% of 
the workforce 


Khan: Entry-level applicants are 
very motivated, dedicated and under 
stand the new emerging technologies 
They are eager to work on challenging 
projects that have a state-of-the-art 
flavor 


Ball: Entry-level candidates in to 
day's market are better-informed and 
educated than their counterparts were 
10 years ago. Today's applicant ha: 
done far more research on trends 
emerging technology and prospective 
employers 


Kelleher: Most recent grads just 
don't get what the business world is all 
about. One résumé that came in this 
week talked about all the great things 
the person did in school, including his 
extracurricular activities, but it had 
nothing about the business skills he'd 
learned in class. His problem was typi 
cal. Colleges need to put more empha- 
sis on the business applications of 
technology 


Are you aware of the GetTech 
campaign? If so, what do you 
think of it? 


Kelleher: Overall, the idea of the 
campaign is a good one, and | like the 
design and the content of the Web site 
My concern is how they are planning to 
promote it. It doesn’t matter how good 
the message is, if it doesn’t get to the 
right audience, nothing will happen 
Also, they should pay more attention to 
giving teens immediate answers on the 
Web site 


Ball: Programs like GetTech are criti- 
cal to the continued success and devel 
opment of tomorrow's leaders in tech- 
nology. From such efforts, we will see 


the next generation of leaders like Bill 
Gates and Larry Ellison 


Khan: ! ama proponent of such a 
campaign, provided that students also 
pay attention to reading, writing and 
sciences that are essential to a well- 
rounded education so they can become 
good communicators. We need to mar- 
ket information technology more in our 
schools and provide students with a 
positive spin on high-tech careers. One 
way to do this is to provide mentors and 
advisers for our younger generation 


Do you think IT careers have a 
negative image? Do you think 
the computer nerd stereotype 
turns off youngsters? 


Kelleher: The nerd stereotype is 
still there, but it isn't as strong as it 
used to be now that technology has 
changed from mainframes and punch 

s to the New Economy and the 
Internet. Kids are now exposed to tech 
nology at a much younger age 

Even my 4-year-old can use a 

mouse. This upcoming generation 
which grew up with home computers 
won't have the same view as past gen- 
erations because, in a way, they're all 


computer nerds 


Ball: The stereotype still exists 
Youngsters who would have considered 
a career in IT but chose law or medicine 
did so because those professions pre 
sented them with images that felt cool- 
er. The Internet has started to bridge 
that chasm 

Today, there are more 25-year-old 
business owners with cool work envi- 
ronments who are acting as mentors 
and role models for today's youth 
Things are changing, but there's plenty 
of work to be done 


Khan: | do not think that IT careers 
have a negative image, especially dur- 
ing the past five years, when technolo- 
gy has helped so many of us 

In many cases, “nerd” is being used 
today as a positive description of some- 
one's accomplishments in development 
of IT systems 


Wolf: IT to many people does mean 
nerdy and techy. However, 90% of all 
IT jobs are at non-IT companies. It's 
not all programming and systems 


analysts. Web developers and sales 
are also IT careers 


There is a huge debate on 
whether the U.S. labor force 
lacks the skills that employers 
want to hire, or the bodies to 
work in IT in the first place. 
What do you think is the under- 
lying cause of the labor shortage 
in IT, and what do you think 
should be done about it? 


Khan: our colleges and universities 
aren't graduating enough computer 
science/information systems majors 
and Ph.D.s. Due to high salaries in IT, 
the number of teachers and professors 
has declined as they opt for more lucra- 
tive positions in the private sector. We 
need to provide incentives for both 
teachers and students to increase the 
numbers of graduates in IT 

Also, the government needs to pro 
vide more training, scholarships and 
grants to students who want to pursue 
IT careers. We cannot and should not 
depend on foreign labor. We have to 
invest in our own citizens 


Wolfe: tect nology is competing 
with every other industry. Health care 
worker and teacher shortages will 
exceed those of technology. The solu- 
tion is a strategic one and will require 
every industry to look at ways to be 
more productive with fewer people and 
to avoid recruitment, hiring and reten 
tion mistakes 
Ball: There is no one reason for the 
labor shortage in IT careers. Certainly, 
subjects like math and science, which 
are critical to technology, need to be 
stressed at a younger age. As a culture, 
we have moved away from the sciences 
and arts and we need to refocus some 
of that energy 

You'd be surprised at the number of 
musicians and artists who are also 
involved in IT. We need to promote our- 
selves better. After all, how many other 
careers can you think of where a 
youngster can run his own successful 
international business and compete 
globally while riding a Razor Wheel 
through the office - all before being 
able to vote? Let's see those corporate 
attorneys compete with that 

Bring it on! 

- Erica Mantred 





Frankenstein, 
Count Dracula, 
The Creature from the Black Lagoon 


Would you do business 
with any of these monsters? 


HireAbility.com provides a not so frightening, customized alternative to the overwhelming, 
hard to manage recruitment sites on the Internet today. Whether you're looking for the 
perfect job or the perfect candidate, HireAbility.com focuses on making the perfect match 
between IT professionals and the clients that need their skills. Instead of trying to be 
everything to everybody we focus on what we do best and thats IT! 


At HireAbilitycom we pride ourselves on our commitment to quality service and 
customer relations. We're building communities for IT and recruiting professionals, and 
hiring managers to share information and tap into valuable resources and services. We 
offer specialized profiles and enhanced searching capabilities, which won't leave you 
fighting off a variety of unlikely prospects. Also, HireAbility.com’s intuitive user-friendly 


design, contact lists and group e-mailing capabilities greatly improve efficiency. 


com 
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Reading, Anyone? 


New book titles touch on leadership, 


management, the Web and the future of IT 


Managing 
Crises Before 
They Happen: 
What Every 
Executive and 
Manager 
Needs to 
Know About 
Crisis Man- 
agement, by 
Ian I. Mitroff (with Gus Anag- 
nos). Mitroff, a business policy 
professor at the University of 
Southern California, believes 
complacency lies at the root of 
how badly companies general- 
ly manage crises. His book of- 
fers thoughts and principles 
that can form the core of a suc- 
cessful crisis management pro- 
gram. (Amacom Books, 166 
pages, $24.95) 


The Leadership Investment: How the 
World's Best Organizations Gain 
Strategic Advantage Through Lead- 
ership Development, by Robert M. 
Fulmer and Marshall Gold- 
smith. The authors look at 
how six organizations, includ- 
ing General Electric Co. and 
Johnson & Johnson, use lead- 


= THE 2000 CORPORATE 
COMMUNICATION AND 
TECHNOLOGY CONFERENCE 

The Waldorf-Astoria Hotel, 
New York; Nov. 28-29 

A look at how information 
technology, especially the In- 
ternet, influences the effective- 
ness of intraorganizational 
communications. 

COST: $1,395 for Conference 
Board associates; $1,600 for 
others 

CONTACT: The Conference 
Board Inc., New York, at (212) 
339-0345; fax: (212) 836-9740. 


www.conferenceboard.org 


® THE DELPHI B2B SUMMIT 
Amelia Island Resort, Amelia 
Island, Fla.; Nov. 28-Dec. 1 
Three days of case study 
presentations that focus on 
best practices, markets and 
alliances in business-to-busi- 


ership development to gain 
strategic advantage. (Amacom 


Books, 322 pages, $27.95) 


The Unfinished Revolution: Human- 
Centered Computers and What They 
Can Do for Us, by Michael Der- 
touzos. Due in January, this 
book by the director of MIT’s 
Laboratory for Computer Sci- 
ence envisions computing be- 
coming as easy as driving a car. 
(HarperCollins, 217 pages, $26) 


MetaCapitalism: The E-Business 
Revolution and the Design of 21st- 
Century Companies and Markets, by 
Grady Means and David 
Schneider. The authors, part- 
ners at PricewaterhouseCoop- 
ers, sort out the many changes 
the Internet is causing in the 
business world and show how 
companies are taking advan- 
tage of these changes, especial- 
ly with global expansion. (john 
Wiley & Sons, 179 pages, 
$24.95) 


The Second Coming of Steve Jobs, 
by Alan Deutschman. This 
unauthorized biography of Ap- 


ness e-commerce initiatives. 
COST: $2,000 

CONTACT: The Delphi Group, 
Boston, at (800) 575-3367. 
www.theb2bsummit.com 


= E-SECURITY CONFERENCE 

AND EXPO 

Hyatt Regency Crystal City, 
Arlington, Va.; Nov. 30-Dec. 1 
For business and IT managers 
who have a say in their organi- 
zations’ e-business security. 
COST: $895 by Nov. 23; $995 af- 
ter Nov. 23 

CONTACT: Intermedia Group 
Inc., Westboro, Mass., at (508) 
870-5858, Ext. 19; e-mail: 
message@imgevents.com. 
www.imgevents.com/ecurity 


@ E-BUSINESS IT OPERATIONS AND 
MANAGEMENT FORUM 

Hyatt Orlando; Dec. 4-5 
Focuses on e-business run- 


ple Computer Inc.’s founder 
goes behind what the media 
sees to reveal a portrait of a 
complex man. Deutschman 
talks with nearly 100 people 
who are close to Jobs. (Broad- 
way Books, 305 pages, $26) 


From .com to .profit: Inventing Busi- 
ness Models That Deliver Value and 
Profit, by Nick Earle and Peter 
G.W. Keen. The authors (Keen 
is a Computerworld columnist) 
look at business lessons from 


a 


the Internet explosion of the 
90s and lay out “value impera- 
tives” for companies to follow. 
(Jossey-Bass, 200 pages, $26) 


Weaving the Web: The Original 
Design and Ultimate Destiny of the 
World Wide Web, by Tim Berners- 
Lee (with Mark Fischetti). This 
book shares the inside story 
behind the development and 
philosophy that has governed 
the growth of the Web from 
the man who created it. Bern- 
ers-Lee, director of the World 
Wide Web Consortium at MIT, 
also describes his vision for 
the Web's future. (Harper- 
Business, 246 pages, $15) 


Ser na 
STEVE JOBS 


and-support strategies as well 
as options and tools that can 
help meet e-business IT opera 
tional needs. 

COST: $895 by Nov. 27; $995 af- 
ter Nov. 27 

CONTACT: Intermedia Group at 
(508) 870-5858, Ext. 19; e-mail: 
message@imgevents.com. 
www.imgevents.com/ebom 


® EHEALTHCARE WORLD 

Javits Center, New York; 

Dec. 4-6 

Discusses what’s coming up in 
the convergence of health care 
and the Internet. 

COST: $1,295 by Dec. 1; $1,395 af- 
ter Dec. 1 

CONTACT: eMarket World Inc., 
Richmond, Va., at (800) 535- 
1812, or (804) 643-8375; 

fax: (800) 942-9770 or (804) 
643-7479. 
www.ehealthcareworld.com 
events 


ONLINE EXCHANGES 2000 
CHICAGO 


Sheraton Hotel & Towers, 
Chicago; Dec. 4-6 

A look at the present and fu- 
ture of business-to-business 
commerce. 

COST: $1,795 

CONTACT: First Conferences 
Ltd., London, at (800) 814-3459; 
fax: (800) 814-3460. 
www.marketsandexchanges. 


com 


@ CAPITOL SANS 2000 

Grand Hyatt Washington; 
Dec. 10-15 

Offers a look at the technology 
behind security — from soup 
to nuts. 

COST: $1,859 to $2,999 
CONTACT: The SANS Institute, 
Fredericksburg, Va., at (540) 
372-7066; fax: (540) 372-3835. 
www.sans.org/capsans2000 
register 


@ E-CUSTOMER SERVICE & 
SUPPORT CONFERENCE 

Hyatt Regency Hotel, Miami; 
Dec. 12-14 
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ANation 
Transformed 
by Informa- 
tion: How 
Information 
Has Shaped 
the United 
States from 
Colonial Times 

, = to the Present. 
Edited by Alfred D Chandler Jr. 
and James W. Cortada. With 
chapters by experts from a va- 
riety of disciplines, this book 
claims that the Information 
Highway is far from new. Look- 
ing at the creation of a postal 
system, the building of roads, 
the invention of television and 
movies, and finally, the Inter- 
net, the editors present the 
theory that the Information 
Highway has been shaping 
North American culture for 
nearly 300 years. (Oxford Uni- 
versity Press, 380 pages, 
$39.95) 


A NATION 
TRANSFORMED 
i 3d ORMATION 


The Difficult Hire: Seven Recruitment 
and Selection Principles for Hard-to- 
Fill Positions, by Dennis Dover- 
spike, Ph.D., and Rhonda C. 
Tuel. Successful recruiting re- 
quires understanding why peo- 
ple take jobs at certain organi- 
zations, according to Dover- 
spike and Tuel. In this book, 
they explore seven principles 
that are necessary for effective 
recruiting, screening and hir- 
ing. (Impact Publications, 151 
pages, $14.95) D 


Covers trends in e-commerce 
customer service, different 
solutions used to communi- 
cate with customers and the 
best methods for identifying 
the skills that are needed for 
good customer service and 
support. 

COST: $1,095 to $1,295 
CONTACT: Digital Consulting 
Inc., Andover, Mass., at (978) 
470-3880; fax: (978) 470-0526; 
e-mail confreg@dci.com. 
www.dci.com 


= E-BUSINESS 

CONFERENCE AND EXPO 

Javits Center, New York; 

Dec. 12-14 

Discusses the strategies, prod- 
ucts and implications of 
e-businesses. 

COST: $995 through Nov. 20; 
$1,295 after Nov. 20 

CONTACT: CMP Media Inc., 
Manhasset, N.Y., at (800) 652- 
2578, Ext. 8228; fax: (212) 592- 
8233. 
www.ebusinessexpo.com 
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Elton John, Founder, Elton John AIDS Foundation" 
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Never before has the Internet been more uniquely poised to make a difference. And 
with Nortel Networks™ OPTera™ optical solutions, the ability to use the new, high- ——— 
performance Internet to raise awareness, educate, and share experiences and 
scientific data is unprecedented. You see, our optical solutions bring speed, reliability, scalability 
and economy to everything from data and call centers to campus or metro networks. That 
means you can collaborate and exchange information in record time — a valuable N RT E L 
commodity in the race to save lives. So come together, right now with Nortel 4 NETWOR KS 


Networks. And make the Internet whatever you want it to be. nortelInetworks.com How the world shares ide 





Market Valuations 


BY MARIA TROMBLY 
HERE’S A technical 
term in economics 

the 

greater fool theo- 
ap- 
plies to situations like pyramid 
stock-market 


known as 

ry” which 

schemes and 
bubbles. 

The idea is that while a stock 

moneymaking 

may be fundamentally worth- 


or a scheme 


less, it may still make sense to 
invest in it if a greater fool will 
come along and take it off your 
hands at a higher price. 

flimflam 


inves- 


Unfortunately for 
“momentum 
who 


men and 


tors” people invest 
when it looks as though a stock 
is going up the supply of 


fools eventually runs 
out and prices tumble to 
their true levels. 

One of the key ques- 
tions investors are ask- 
ing themselves today is g 
this: Have stock prices 
for 


their true levels? 


dot-coms reached 
This is where market 
valuations come in 
the measures of what a com- 
pany is worth. One easy way to 
judge the worth of a company 
the price of 
the total num- 
ber of outstanding shares. This 


is to multiply 


each share by 


is what is known as the 
capitalization 

If the 
perfect, 


market 
of a company. 
market 
market 
would be the true value 


were 


capitalization 


of a company. 


Other Ways to Value 


Another way of valu- 
ing a 
count up its assets, in- 


company is to 


cluding its physical fa- 
cilities and patents. 

A company can also 
be valued by examining 
its books, by looking at 
how many customers it 
has, how much money 
it makes and how fast it 
is expected to grow in 
the future. 

When the stock mar- 
ket was soaring and the 
New Economy 
blossoming about two 
Wall 


was 


years ago, some 


J.P. MORGAN’S 
WYMAN: Ama- 
zon’s growth ex- 
pected to slow 


BUSINESS 


FINANCIAL & BUSINESS CONCEPTS IN BRIEF 
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Market valuation: An estimated measure by 
investors and analysts of a company’s worth. 
Valuations can be based on assets, revenue, 
earnings, cash flow or other factors. 


Street analysts argued that dot- 


coms needed to be valued 
based on their growth poten- 
tial, not on their profitability. 
As a high-tech 
companies, such as Seattle- 


were 


result, many 
based Amazon.com Inc., 
valued based on projected rev 

enue or on how 
quickly they 
adding Web site visi- 


were 


“Amazon’s rev- 
170% 
1999. 


tors. 
enues grew 
from 1998 to 
his year, we're fore- 
casting that they’ll 
grow 60% year-over- 
year, says Tom Wy- 
man, an analyst at J.P. 
Morgan & Co. in New York. 
“You can see that they’re slow- 
ing down.” 

That slowdown in revenue 
growth and the resulting 
drop in valuations that were 


200 Market Cap (In millions of dollars) 


based on projected revenue 
helps explain why 
stock price 
from more than $126 in Octo- 
ber 1998, hitting a new 52-week 
low of $19 on Oct. 18. 


Amazon’s 


has plummeted 


An Industry Matures 

Every company’s revenue 
growth will slow once it reach- 
es a certain size, says Wyman, 
but it doesn’t necessarily mean 
that the first set of valuations 
was wrong. “If the company 
does grow 60%, it will be the 
fastest growth rate for a retail 
er this size in the country,” he 
says. With annual revenue of 
more than $1 billion and sales 
that are growing 60% annually, 
says Wyman, Amazon’s num 
bers are “nothing to sneeze at.” 

But investors today are more 
concerned with the profitabil- 
ity and sustainability of New 


The Rise and Fall of Dot-Coms 


By comparison, traditional companies have seen fewer ups and downs over the past two years 


Economy companies, said 
David Zale, an analyst at Sands 
Brothers & Co. in New York. 
“The only true measurement 
of a company’s stock price is 
the ability of a company to gen- 
erate cash,” he says. 

To figure that out, says Zale, 
investors can look at historic 
earnings or future earnings, or 
examine cash-flow reports to 
get hints at how healthy a com- 
pany is. 

What makes it more difficult 
to determine the value of an 
Internet company such as Ya- 
hoo Inc. in Santa Clara, Calif., 
than a traditional brick-and- 
mortar firm like Hoffman 
Estates, Ill.-based Sears, Roe- 
buck and Co. is that there isn’t 
a lot of history to draw upon. 
New Economy companies 
lack track records, 
and whole 


financial 


the sector as a 


Market Cap (In millions of dollars) 


Wal-Mart 


$363.2M 
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is uncharted territory. 

“We're just not there yet in 
terms of knowing who wins 
and who loses and what kind 
of cash flows are associated 
with being a winner,” 
Wyman. “It makes it difficult 
to pin down whether [a compa- 
ny] should be worth 20 times 
revenues, 50 times revenues or 


says 


two times revenues.” 
Meanwhile, Internet compa- 

nies and their investors have 

begun to mature, says Zale. 


Substance or Mere Hype? 

“You have a change in the 
shareholders,” Zale says. “You 
have had shareholders who 
were in at the beginning who 
were purely momentum share- 
holders. Once there’s any hic- 
cup, they’re out. The next 
group of people comes in [and 
they] really understand what 
this about” and 
concern themselves more with 
earnings potential and cash 


business is 


flow, he says. 

Once _ educated 
have taken a close look at dot- 
coms, they may find there’s not 
much substance beyond the 
hype, according to Jim Horty, 
president of Horty & Horty PA, 
an accounting firm in Wil- 
mington, Del., that specializes 
in valuing start-ups. That's 
because it’s typically 
easier for a traditional 
firm to launch an 
e-business than it is for 
an Internet firm to 
acquire a deep under- 
standing of a particu- 
lar industry, he says. 

Many dot-coms that 
started with flimsy 
business models are 
now facing competi- 
tion from traditional 
businesses — and they 
often don’t measure up. 

“The people who 
understand the busi- 
ness and the merchan- 
dise now know enough 
about the dot-com 
world to have their 
own outlets,” Horty 
says. “And they under- 
stand that merchan- 
dising business much 
better than the dot- 
coms do.” D 


investors 
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Sitara Networks can give you 
the divine ability to: 


..all within your network 
budget and resources. 





BEST OF SHOW 
NETWeRLD INTEROP 
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PEOPLE'S CHOICE 





Every company, from small enterprises 
to large service providers can achieve 

this higher state of enlightenment and 
functionality. If not, your business is at 
risk, and your competition knows it. 


Sitara’s layer of intelligence 
customizes the network to deliver 
what you need when you need it. 
DY=}i\isimelOrN Olea ccialt 
application response time, fast web 
access, and guaranteed SLAs all on 
your existing network. 





We’re the Ist company to deliver an 
integrated and modular QoS (Quality 
of Service) platform worldwide that 


integrates highly scalable bandwidth 
management, a layer of application 
specific intelligence, and end-to-end 
(oo }aa) 9) c-1al-Jar)\ =m Oleh Maar-laret 4 lant aal a 


By partnering with industry leaders, 
including Siemens, Citrix® Systems 
Inc. and Sumitomo Corporation — 
Sitara protects your network with 
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Work out details 
later? No! Now! 


ERE’S A CLASSIC EXAMPLE Of why you should always 
make sure service levels are specified before you 
sign a contract with a vendor. During recent negoti- 
ations for a large data center outsourcing agreement, 


the vendor skillfully avoided 
tougher service-level guar- 
antees by convincing the 
customer that service-level 
agreements (SLA) should be 
negotiated after a 90-day 
transition period. The ven- 
dor convincingly argued 
that service levels could be 
better determined once it 
understood the customer’s 
operations. 

lhe vendor suggested that 
the two sides work together 
to identify service levels 
during the transition. The 
customer fell for this, believ- 
ing that information gath- 
ered during the transition 
period would produce more 
favorable SLAs. The cus- 
tomer signed a contract with 
no specific SLAs, no “out” 
clause if the two parties 
failed to agree on service 
levels and no recourse if the 


Domain Dispute 


A company that wants to preregis- 
ter new top-level domains is suing 
the Internet Corporation for As- 
signed Names and Numbers 
(ICANN), the organization charged 
with managing the domain-name 
system. San Antonio-based Reg- 
Land Inc. is accusing ICANN of in- 
terfering with RegLand’s business 
of letting people “stand in line” for 
the as-yet-unannounced domains. 
Marina del Rey, Calif.-based ICANN 
is soon expected to expand the 
number of new top-level domains 
beyond .com, .net and .org. 
RegLand, for a $20 fee, promises 
to stay on top of the registration 
process and to move swiftly when 
the top-level domains are created, 


vendor failed to perform. 

At the end of the transi 
tion period, the vendor was 
willing to sign only a few 
weak SLAs with no reme- 
dies. For example, the sup- 
plier agreed to make appli- 
cations “generally available” 
and that help desk calls 
would be answered “as soon 
as practical.” As you might 
suspect, the vendor escaped 
accountability with these 
“commitments” because no 
one could agree on what 
those terms really meant. As 
a result, the customer ended 
up with a multiyear contract 
that heavily favored the 
vendor. 

To avoid this kind of mess, 
start with specific SLAs and 
remedies in your request 
for proposals. Let a qualified 


| vendor perform due dili- 


gence under a nondisclosure 


but isn’t guaranteeing customers 


| that it will succeed with the regis- 


tration. 

ICANN, according to RegLand’s 
lawsuit, is disrupting the partner- 
ships it is seeking with registrars 
needed to deliver its service. Ina 


| statement, ICANN called the lawsuit 


“utterly baseless.” 


' Electronic-Book 
' Publishing 


Time Warner Trade Publishing, the 


| parent company of Little, Brown 
| and Co., Warner Books Inc., Little, 
| Brown Children’s Books, Bulfinch 


Press and Time Warner Audio- 
Books, last week tapped Rockville, 
Md.-based Artesia Technologies Inc. 


| to help streamline the company’s 


internal workflow system. Time 
Warner Trade Publishing will use 


clause as part of its prepa- 
ration before making its 
proposal. 

A vendor’s bid should be 
based on your required 
SLAs, which should at least 
match the service IT is 
currently providing. In 
most cases, the SLA should 
exceed the current levels 
because you're considering 
services provided by “ex- 
perts.” The key is to specify 
desired service levels up 
front, early in the vendor 
evaluation process. 

The critical error here 
was signing a long-term 
contract without agreement 
on a fundamental issue — 
service quality. With a 
signed contract and no 
SLAs, a vendor won't be 
motivated to guarantee 
exemplary service, only a 
minimal quality commit- 


Artesia’s Teams digital asset- 
management software to create 
an enterprisewide, Web-based 


| digital archive to store and reuse 
| print and audio books, as well as 
| Manage manuscripts, artworks, 

| author biographies and editorial 
| reviews. 


‘Digital Video 


| Sprint PCS Group in Kansas City, 


Mo., and FlashPoint Technology Inc. 
in San Jose announced a partner- 


| ship last week that will allow 


enterprise customers to send 
images to the Internet via Sprint's 


| wireless networks. The system will 


use a digital camera connected to a 


| Sprint PCS Internet-ready phone, 


with digital imaging provided by 
Photivity from FlashPoint. Details 
weren't announced on when such 
a product will roll out. 





ment that would leave the 
customer without meaning- 
ful recourse for unsatisfac 
tory service. 


Mail Bag 


In response to my Sept. 4 
column about responsibility 
for negotiations, I received 
an insightful e-mail from 
Rick Zuza, an as- 
sistant vice presi- 
dent for procure- 
ment at Allstate 
Insurance Co. It’s 
right on: 

“The solution is 
simple, although 
the execution is 
much more diffi- 
cult. Have a well- 
trained procure- 
ment professional 
do the deal! This 
ensures consisten- 
cy across all IT 
deals. This also 
saves the motiva- 
tion problem, for 
this is their pri- 
mary metric. = 

Finally, IT people need to 
work with the vendors every 
day on technical issues. This 
is less than optimal when 
conflict occurs. Once again, 
the procurement professional 
can be the ‘bad guy, 
tough during contract admin- 
istration. Also, this frees up 
the IT professional to do, 
well, IT. 

Now, the tough part, the 


getting 


Seeking Stability 


JOE AUER is president of 
International Computer 
Negotiations Inc. 
(www. dobetterdeals.com), 
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consultancy that 
educates users on high- 
tech procurement. ICN 
sponsors CAUCUS: The | 
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execution. Are CIOs willing 
to relinquish this control to 
the procurement department? 
Is the CEO willing to invest in 
hiring and training top talent 


for the procurement depart- 


ment in order to accomplish 
this objective? Even after the 


| control is transferred to the 


procurement department, will 
the CIO and his 
lieutenants resist 
undercutting the 
power of the pro- 
curement [depart- 
ment] by doing 
deals on the side? 
“These are 
tough questions. 
But if you look 
around at the 
} companies cutting 
| the best deals 
| and having their 
vendors live up to 
| them, they have 
| the one-two punch 
of the IT and pro- 
curement depart- 
ments working 
together — IT 
defining the technology and 
the SLAs, procurement going 
out and selecting the vendors 


| and enforcing the SLAs.” 


Thanks, Rick. My only 


| addition is that a cross- 


functional team, covering 
procurement, IT, legal, 
finance, operations, the end 


| user and senior manage- 


ment, is the way to go on 
large deals. D 


CIOs who are looking for jobs are interested in more than salary 
and stock — such as the likelihood that the company will still be 
around a couple of years from now, according to a recent poll. 


Some of their top concerns other than salary and traditional 


: benefits include: 
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Introducing Relationship Technology” Solutions from NCR, the power to know. 


telecommunications companies, six of the world’s, top seven airlines 
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We give you the power to know. 


When your application hits the Oracle 


performance wall, how will you scale it? 


If you run web applications 


on a relational database, sooner 


or later you will run into a wall of 


speed and scalability limitations. 

What are the first signs that 
the wall is getting close 
your data center starts buying 
more expensive computers. Or 
maybe you are suddenly spending 
money on “middlewa 

Before you know it, the costs 
related to running your relational 
database are skyrocketing, while 
your probability of success is 
plummeting — because relational 
database technology was never 


meant to meet the performance 


demands of today’s e-applications. 
The best way to scale the 
performance wall is with Cac 
the post-relational database 
proven to run SQL based 
applications up to 20 times 
faster than relational database 
technology, and to scale up to 
many tens of thousands of users 
without sacrificing performance. 
Plus, Caché includes a rapid 
e-development environment, with 
simple-to-use yet powerful object 
technology that dramatically 
accelerates the creation and 
adaptation of sophisticated web 


applications. 


Caché comes from 
InterSystems, a specialist in 
high-performance database 
systems for over twenty years — 
with 24x365 support, and over 3 
million users worldw Caché is 
available for Windows, OpenVMS, 


Linux and major Unix systems. 


LICENSE 10 SPEED 


Web 
les you to speed UP 
Entication development 


and performance 
interSystems F 


ee CACHE 


e-DBMS.com 


World’s Fastest & Most Scalable Database. 


Download a fully-functional copy of Caché for free at e- DBMS.com, 
or call 1-800-753-2571 for a free CD. 
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NUKE 
KNOWLEDGE 


Sandia National Labora- 
tories turns to a new 
searchable video tech- 
nology to produce an 
archive containing pro- 
cedures on securing 
nuclear weapons. The 
fast access is a must for 
the lab’s emergency 
response team. » 94 


HACK OF 
THE MONTH 


As online retailers gear 
up for the shopping sea- 
son, it’s important that 
they shore up defenses 
against hacker attacks, 
fraud and other threats. 
Deborah Radcliff offers 
a reality check and some 
security advice. » 96 


SECURITY 


JOURNAL 


As antivirus software 
problems continue, Jude 
wonders if it would be 
worth the effort to 
switch to another prod- 
uct. Meanwhile, an ap- 
proval for new security 
staff leads to a parade of 
high-priced talent. » 100 


HANDS ON 


Kodak’s newest digital 
camera delivers high- 
resolution digital pho- 
tography at a lower 
price than many com- 
petitors. It’s not the best 
you can buy, but it will 
meet the needs of most 
photographers. » 102 


FUTURE WATCH 


As researchers contem- 
plate alternatives to sili- 
con, the massive paral- 
lelism offered by DNA 


computing is intriguing. 
Scientists have solved 
problems in test tubes, 
but it’s not easy — or 
quick. » 104 


FIELD REPORT: 


SOL SERVER 2000 


According to early 
users, Microsoft’s SQL 
Server 2000 is a better 
database management 
system than those from 
competitors such as 
Oracle and IBM.» 115 


NEW PATH FOR 


THE ROUTER? 


Advocates of competi- 
tive technologies claim 
the router is doomed, 
but experts question 
whether it makes sense 
to move routing func- 
tions to small devices. 
Some want to throw 
bandwidth at the prob- 
lem; others say building 
routing intelligence into 
other devices will 
spread the load and 
make networks more 
efficient. » 120 


QUICKSTUDY = 


Applets and servlets — 
small applications often 
written in Java — can 
enhance the display and 
delivery of Web pages. 
Learn more in this 
week’s tutorial. » 124 


JOB WATCH 


Only a handful of IT 
professionals hold the 
title of chief privacy 
officer. The job is a new 
one and is usually held 
by someone from the 
legal side. But that’s 
changing, as new priva- 
cy regulations affect the 
storage and handling of 
customer data. » 127 





GREDE FOUNDRIES’ Rich 
SHES RM ass 
with server consolidation 


LINUX KNOCKS AT’ 
THE DAIA CENTER 


CORPORATE IT HAS FULLY EMBRACED Linux and other open- 
source products as standard elements in the Internet 
infrastructure, but most information technology man- 
agers haven’t deployed Linux inside the data center 


and say they are unlikely to do so in 
the coming year. What will it take for 
Linux to gain access to the corporate 
data center? 





IBM Announces Chip 
Based on PCI-X 


IBM last week announced its first 
bridge chip based on PCI-X technol- 
ogy. PCI-X is an enhanced version 
of current Peripheral Component 
Interconnect (PCI) 1/0 technology. 
PCI-X delivers 133-MHz perfor- 
mance, well above the 66-MHz 
standard on PCI technologies. IBM's 
PCI-X bridge chip is being targeted 
for use in storage-area networks 
and voice and data communication 
applications, which require high 
bandwidth and fast 1/0. 

IBM said vendors that are devel- 
oping or evaluating applications 
based on IBM's PCI-X bridge 
include Adaptec Inc., American 
Megatrends Inc. and Emulex Corp. 


Microsoft Rolls Out 
Security Server 


Microsoft Corp. last week began 
shipping to early adopters the 
second release candidate of its 
Internet Security and Acceleration 
Server. The company made avail- 
able both an enterprise edition and 
a standard edition. All firewall and 
caching features are the same in 
both editions, but the standard 
edition can run on only four proces- 
sors or fewer, according to Micro- 
soft. The enterprise edition also lets 
users set enterprise-level security 
policy and manage server arrays. 

The enterprise edition will sell for 
$5,999, and the standard edition 
will cost $1,499. Both versions are 
scheduled for general release early 
next year. 


SyChip to Provide 
GPS to 911 Service 


SyChip Inc. in Warren, N.J., has 
announced the creation of its 
GPS2020 Global Positioning Sys- 
tem (GPS) chip, a module that’s a 
half-inch by a half-inch and can be 
built into cellular phones and per- 
sonal digital assistants to add wire- 
less GPS capabilities. The chip will 
allow wireless carriers in the U.S. to 
comply with new Federal Communi- 
cations Commission regulations 
that require all cellular phones 
offered by carriers to identify their 
locations to within 125 meters (412 
feet) for 911 emergency calls by the 
end of 2002. 


TECHNOLOGY — 





‘Training Assisted 
By Searchable Video 


Federal emergency response team will be 
able to find clips easily with keywords 


BY JAMES COPE 
HEN THE 
U.S. Depart- 
ment of En- 
ergy Emer- 
gency 
sponse Group practices dis- 
arming weapons, it 
videotapes the exercises to use 
for reference and training. Be- 
ginning next month, the group 
will be able to locate specific 
clips by means of a searchable 
video database being devel- 
oped by Sandia National Labo- 
ratories in Albuquerque, N.M. 
Mike Krawczyk, a software 
engineer at Sandia, said techni- 
cians routinely digitize the 
videos for storage on the hard 
drive of a file server. But early 
next month, the lab will begin 


Re- 


nuclear 


archiving video in a searchable 
database, he said 

One goal, according to 
Krawczyk, is to store the video 
in such a way that it can be 
searched by keywords and 
phrases recorded on the audio 
track. Another goal is the cre- 
ation of a system that permits 
extraction of specific video 
segments without having to 
the That 
would let users extract key 


view entire video. 
points of interest and repack- 


age them as embedded video 


| system 


in PowerPoint presentations. 

Krawczyk said Sandia has 
contracted with Excalibur 
Technologies Corp. in Vienna, 
Va., to provide the video cap- 
ture and search software. The 
will run on servers 
from Round Rock, Texas-based 
Dell Computer Corp., he said. 

“We take the raw videotapes 
and have a contractor tran- 
scribe the audio and give us a 
document file,” Krawczyk ex- 
plained. That file is then se- 
quenced with the video, which 
makes the video searchable by 
keyword. 

Krawczyk said searching for 
the keywords rendered safe, for 


example, displays links to video | 


segments in which those words 
were spoken by a member 
of the Emergency Response 
Group. Clicking on a link starts 


the video where the audio of | 


keywords begins, he said. 
A video technician can then 


mark frames before and after | 


the key phrase to extract just 
that segment for use in a pre- 
sentation or future training ex- 
ercises, Krawczyk explained. 
Phil Lee, an analyst at Ray- 
mond James Associates Inc. in 
St. Petersburg, Fla., said the 
technology could be valuable 


to companies such as air- 


HP Licenses IP Network 
Manager for OpenView 


Analysts: RiverSoft 
NMOS is superior 


BY SAMI LAIS 
A licensing 
nounced last month between 
Hewlett-Packard Co. and River- 
Soft Technologies Ltd. will im- 
network management 
capabilities for users of HP's 
Network Node Manager for its 
OpenView enterprise manage- 


agreement an- 


prove 


ment system, analysts said. 

HP will license source code 
for San Francisco-based River- 
Soft’s network management op- 
erating system (NMOS). It will 
also join San Jose-based Cisco 
Systems Inc., a 6% shareholder, 
as a minority investor. Finan- 


cial terms weren't disclosed. 


RiverSoft’s NMOS is “one of 


the most sophisticated physi- 
cal modeling programs,” said 
Dennis Drogseth, an analyst at 
Enterprise Management Asso- 





lines, which perform com- 
plex maintenance tasks. 

“Searchable streaming me- 
dia would be a good way to 
show how to put in and remove 
a part,” Lee said. 

The World Bank in Washing- 
ton also uses the Excalibur sys- 
tem, according to Eric Engel- 
mann, an information officer at 
the bank. However, the key- 
word searching feature is sel- 
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dom used by his organization, 
he said. 

The presentations and de- 
briefings that the World Bank 
videotapes are often long, and 
it would be too laborious to 
transcribe the text manually, 
he explained. And although 
Excalibur does have an audio- 
to-text conversion engine in its 
software, Engelmann said it 
works well only in a controlled 
environment, such as a pre- 
pared speech given from a 
podium. 

Excalibur will load the soft- 
ware on Sandia’s computers 


| early next month, Krawczyk 
| said. The system is expected to 


be operational by Dec. 9. 


SANDIA NATIONAL LABORATORIES is developing a searchable video 
database that will allow keywords to be used to locate segments 


ciates Inc. in Boulder, Colo. 

The program automatically 
models and monitors topology, 
configuration and component- 
change management, greatly 
speeding network problem res- 
olution, Drogseth said. 

“It’s been a sore point for 
network managers that they 
can’t finish polling every de- 
vice before it’s time to start 
again,” said Patrick Dryden, an 
analyst at Illuminata Inc. in 
Nashua, N.H. The NMOS addi- 
tion would speed that process, 
he said. 

The RiverSoft 
might as well be stamped “des- 
tination Network Node Man- 
ager,” said Valerie O’Connell, 
an analyst at Aberdeen Group 


technology 


Inc. in Boston. “{It] would in- 
stantly bring much-needed Lay- 
er 2 discovery and mapping 
capability to Network Node 
Manager.” 

The agreement came 
weeks after HP announced 
that it would acquire Blue- 
stone Software Inc., a Web 
server and application devei- 
oper in Philadelphia. 

With Bluestone bolstering 
HP’s WebQOS Web server and 
application manager and River- 
Soft extending Network Node 
Manager, the two agreements 
constitute “a one-two punch,” 
offering users “a step up 
in service-level management,” 
said Jonathan Eunice, Illumina- 
ta’s president. D 


two 
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TECHNOLOGY 


MONTH 


OF THE 


‘Take caution this 
holiday season 


IKE YOU NEED one more thing to worry about dur- 


ing your annual holiday preparations. But now, more 


than ever, you can’t put your security on the back 


burner. 


Here’s your reality check: How much would it cost 


your company if it were to fall off the Internet the way Ama- 


zon.com Inc., 


Yahoo Inc. and others did in February — only it 


happened to your company on the biggest shopping day of the 
year? And whose head would roll if, at the height of the shop- 
ping season, your company ended up in the headlines because 


customers’ credit-card numbers were 


posted on the Web, as happened to 
a half-dozen online businesses in 
January? 

“Imagine if those [distributed 


PACE /Buticy 
CORPORNTEEE) 


denial-of-service] attacks in Febru- 
ary really came on the 21st and 22nd 
of December. It could have been a 
disaster for online retailers,” says 
Ian Poynter, president and founder 


PACE/BUTLER 


CORPORATION 


4 
», 800-319-9355 


Fax: 405-755-1114 
http://www.pace-butler.com 


13900 N. Harvey Ave. 
Edmond, OK 73013-2431 


FAST ¢ FAIR ¢ FRIENDLY ¢ Since 1987 


Your Second Source for Sun Microsystems Computers 


Servers & Workstations 


Tape Libraries & Tape Autoloaders 


\ Arrays 


Tape & Disk 
Drives 


West Coast Computer Exchange, Inc. 

11167-A Trade Center Drive, Rancho Cordova, CA 95670 
Call 916-635-9340 or Fax 916-635-9485 

Call 714-921-5999 or Fax 714-921-4208 
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| ping-cart applications. “ 


| Inc. 


of Jerboa Inc., 
firm in Cambridge, Mass. 


a security services 


In addition to denial-of-service 
attacks, merchants should also take 
precautions to protect their shop- 
We've done 
a bunch of application-level [pene- 
tration] tests on shop- 
ping-cart applications. 

Getting access to other 

users’ accounts and pri- 

vate information is pretty 

much the norm,” says Ken 

van Wyk, chief technolo- 

gy officer at Para-Protect 
Services Inc., a security 
services firm in Alexan- 
dria, Va. 

And there’s that little 
problem of credit-card 
fraud, something 132 elec- 
tronic-merchant respon- 
dents claimed was present in 4% of 
their transactions last year, accord- 
ing to Mountain View, Calif.-based 
CyberSource Corp. in its Cyber- 
Source 2000 Fraud survey (www. 


| cybersource.com) released last month. 


Jean Bruesewitz, senior vice pres- 
ident of advanced risk solutions at 
Foster City, Calif.-based Visa USA 
, says fraudulent credit-card use 
is more dominant in the cyberworld 
than in any other “card-not-present” 
medium. 


Needs Attention Now 


Clearly, now is not the time to 
divert your attention from security 


| requirements. 


The good news is that you can 
take advantage of current holiday 
preparations and keep your security 
work to a minimum. For example, as 


| your company prepares for more 


traffic, it will likely install redundant 


| fail-over systems, something that 


| already includes more protection 


| against denial-of-service attacks, 


| says Poynter. Just make sure there’s 


a mechanism in place to filter out 


| the offending denial-of-service 


traffic so it won’t roll over with the 
legitimate traffic, he says. 

The problem will be catching 
denial-of-service traffic before it 
shuts you down. 

“If your traffic increases overall, 
it becomes difficult to look for the 
traditional spikes in volume that 
indicate a denial-of-service attack,” 
says Poynter. 

That’s why you need a plan. 

And that plan should revisit such 
procedures as network monitoring, 


| upstream filtering and other safe- 


guards from your application ser- 


DEBORAH RADCLIFF is a 
Computerworld feature 
writer. Contact her at 
deborah_radcliff@ 
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vice provider or Internet service 

provider and making sure that con- 

tact names and numbers are up-to- 

date, says Poynter. Most important, 

the plan must include incident re- 

sponse. In fact, practicing your re- 

sponse at least once would be ideal. 
As for fraud protec- 

tions, Visa is piloting 

an eight-part program 

designed to curb Inter- 

net credit-card fraud 

called Visa Secure Com 

merce, which includes 

compliance, authentica- 

tion and a “neural net- 

work” that will alert 

online retailers to fraud- 

ulent card numbers, 

among other services. 
With a rollout planned 

for the middle of next 

| year, Visa Secure won't be able to 

| help merchants this season. In the 

| meantime, Bruesewitz recommends 

| that retailers verify the cardholder 

| by requesting the last three digits of 

| the card verification value number 

| on the back of the card in the signa- 
ture box. She also urges merchants 

| to use Visa’s Address Verification 

—— (www.visabre.com/doc.phtml? 

,71,327,818_basicard.html). 
For the shopping cart applications, 

| check out advisories such as www. 

| securityfocus.com/frames/?content= 
vdb/bottom.html%3Fvid%3D1237 
and patch those applications accord- 
ingly. It wouldn’t hurt to test the 

| shopping-cart applications by at- 
tacking them the way van Wyk’s 
team has. 

| Now that wasn’t too painful, was 
it? And who knows? You might just 

| keep your head this holiday season. DB 


If your traffic 
increases overall, 
it becomes difficult 
to look for the 
traditional spikes 
in volume that 
indicate a denial- 
of-service attack. 


IAN POYNTER, PRESIDENT AND FOUNDER, 
JERBOA INC. 
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Modeling Software Designed to Cut Project Time and Cost. S=':...'s- 


ence,” said Stowe, “I'd say the 
BY SAMI LAIS ect simulation software can Kenneth H. Stowe, project | Boston, has used SimVision to | kind of savings people can ex- 
4 group of Stanford University | predict potential missed mile- | services director at construc redesign internal project-eval- | pect from using [SimVision] is 
professors who formed Vite | stones, overspent budgets and | tion management specialist | uation processes and plan four | about 2% to 4% ona job.” 
heir SimVision proj staff burnout George B.H. Macomber Co. in | projects. He said he selected Macomber’s average project 
ranges from $5 million to $200 
million, he said, adding that the 
tool can reduce a _ project’s 
length by as much as 12%. 

Mountain View, Calif.-based 
Vite “is making more graphical 
and intuitive the mathematical 
calculations you can do with 

"S ALL ABOUT RESTORE this kind of modeling soft- 
ware,” said Mathew Light, an 
analyst at Gartner Group Inc 
in Stamford, Conn. 

Project software from Arte 
mis Management Systems in 
Boulder, Colo.; PlanView Inc. 
in Austin, Texas; Primavera 
Systems Inc. in Bala Cynwyd, 
Pa.; and Welcom in Houston 
also allow some modeling, 
what-if scenarios and resource 
planning, Light said. 

“What they don’t do is target 
quickly and efficiently which 
tasks are creating the major 
bottlenecks. That seems to be 
where [SimVision] can add val- 
1e,” he said. 


Heuristic Method 


Most modelers use algorith- 
mic methods, which rely on 
predefined, immutable rules 
and conditions, said Raymond 
Levitt, Vite’s chairman and 
co-founder. SimVision uses 
heuristics, a method that relies 
on trial and error to “learn” as 
simulations run, he said. 

To define the range of reac- 
tions of each individual in- 
volved in a project, the Vite 
software draws on a database 
amassed from sources such as 
MIT and Stanford, which have 
been collecting such data for 
more than 10 years, said Robert 

a Drazovich, president of Vite. 
To use SimVision, a compa- 
ny inputs data about its organi- 
Say Hello to a Good Buy. zation, staff, skill levels and 
other resources — a process 
that usually takes a few days, 
The VXA-1I TAPE DRIVE offers you 3 times the performance and capacity of DDS-3 at about the same cost, and Drazovich said. For technolog- 
higher performance and capacity than DDS-4 at less cost. Plus, it provides sky-high reliability, unheard of restore ically sophisticated Hewlett 
capabilities, and compatibility with just about every operating system and software out there. That's what happens Packard Co., the process took 
when two engineers, who have been pioneering tape drive innovations for a combined 60 years, set out once again less than a day, he said. 
Managers then run the simu- 
lation a number of times per 
Try it for yourself, free, for a full 30 days. Just go to www.ecrix.com/cw. Or call 800.VXA. TAPE — and say hello. user, and outcomes are aver- 
aged and presented in a series 
of graphs, Drazovich said. 
Users can drill down to see sta- 
3 tistics on individual resource 
*, ¢ \ "he ‘ TAPE DRIVES BY Y Eier1x use, as well as tweak the model 
= = for particular what-if scenar- 
ios. The average price for 
SimVision is $80,000. DB 


to create something just a little bit better. A little bit smarter. And a lot more affordable. 


MSRP for internal drive. External ve pictured, $1,049 MSRP. Specification sume a 2:1 ALDC hardware Ipression ratio. 


Copyright Ecrix C tion 2000. All rights reserved.VXA is a registered trademark of Ecrix Co ation 
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IT HARDLY SEEMS FAIR. 


Easy to Manage Server Appliances. 


Looking for an unfair business advantage? Then get our new, scalable, 
high performance server appliances that are only 1U high, built with lights-out 
o 5 5 k 
remote management and pre-configured so you can just plug them in and go. networl engines 


Because all's fair in love, war, and, of course, business. 877-638-8277 www.networkengines.com 
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Vendor Support Shocks; 
Hiring Approval Rocks 


Getting the green light for new hires takes Jude 
away from his company’s ongoing vendor issues 


IRST, a big, hearty “well done’ 
to the Computer Associates 
International Inc. PR depart 
ment. I’m beginning to lose 
track of the number of people 
e-mailing me asking, “Have you thought 
of InocuLAN?” all 
the ll] reasoned 


trying and of 


messages are well and 
articulate 

But they’re 
My 
finding a 
technically better than Nor- 


ton AntiVirus. I can do that 


missing the 
isn't 
that’s 


point problem 


scanner 


in about 10 seconds flat 
Anti-Virus 
Micro 


Sophos _ Inc.'s 


and Trend Inc.’s 
ViruScan (OK, and Inocu 
LAN) spring to mind. 

My problem is convinc- 
ing management that the 
heartache and upheaval of 
ripping out the existing 
scanner and rolling out a 
new one is worth it, espe- 
cially when our head of- 
fice isn’t seeing the same 


problems 


More Ammunition 

Mind you, I’ve been handed another 
a plate. At 
lunchtime yesterday, we got 500 alerts 


piece of ammunition on 


from Norton regarding detections of 
the memory-resident virus PS-MPC 
(6). It was a real flood — 500 alerts in 
just about 15 minutes. All the alerts said 
“unable to repair this file” — no reason 
why, no error code, nothing. Just “un- 
able to repair.” 

The engineer who got the alerts went 
to Symantec Corp.’s Web site for a de- 
scription of the virus at www.sarc.com 
avcenter/cgi-bin/virauto.cgi?vid=6662. It 
doesn’t say anything at all about what 
the virus does or how to stop it. 

So he rings the support line. The first 
support person says, “Uh, that’s not one 
of our viruses.” That statement’s scary 
on quite a few levels. The second sup- 
port person is equally clueless but al- 
ternates with behavior so patronizing, 
it almost causes our engineer to lose 
her temper. End result: nothing. 

(Does anyone out there know any- 
thing more about this virus? What does 


Security 
Manager's 
Journal 


| 


it do? Should we be worried?) 

In the end, we power off the infected 
workstations to flush the virus out of 
memory; reformat their hard drives, be 
cause it’s got to be read into memory 
from somewhere, but we don’t know 
where; delete the infected area of the 
server; and reboot. It seems to have 
worked, but I have no way 
of telling for sure 

rhere’s old 
that springs to mind: Why 


an saying 
buy a dog, then bark your- 
self? But that’s it. I’m not 
going to talk about viruses 
any more. I shouldn't be 
wasting so much time on a 


problem so trivial. 


The Search for Staff 


On to a more joyful sub- 
ject: recruiting. Yes, after a 
few months of persuading 
that 
need to step up our secu 
rity efforts, the 
has hit home. We’ve been 
given the budget to hire 


our management we 


message 


four security engineers 
one for Windows, one for Unix, one for 
networks and one for e-commerce. As 
there wasn’t even one security person 
in the company before I joined this 
summer, this is a significant step. 

I don’t know if the situation is the 
same in the U.S., but in this country, the 
recruitment market is very fractured. 
There’s a whole host of small agencies, 
none of which seem to stand out above 
the rest as being particularly reliable or 
able to find security specialists. 

I do have the names of a few agents 
who have been good before, but it 
seems to be down to the quality of the 
individual agent, not the agency. I’m a 
bit wary of posting on one of the dot- 
com services like StepStone or Job- 
serve, partly because I want to have 


someone else do the initial screening | 


for me. 

I feel that maybe I ought to talk to 
our internal human resources depart- 
ment, but as I’ve never been hired by a 
staffing department or know anyone 
in information technology who was, I 
can’t really see the point in doing that. 


At most companies that have inter- 
viewed me, I was interviewed by an 
agency first, then by the prospective 
manager and then maybe again by ei- 
ther the next level up of management 
by 
working. Once you've 
jumped all 
you're offered the job 


occasionally the people with 


I'd be 


through 


or 
whom 
those 


and then they 


hoops, 


say, “Oh, you’ve got to go for the for- 
mal HR interview first.” That doesn’t 
really give the impression that human 
resources has much say in the deci- 
sion process. 

Still, I presume that that’s a catch-22 
IT 


resources because they’re not 


situation: managers don’t use hu- 
man 
much help, and the staffing depart- 
ments aren’t much help because IT 
managers don’t call them until too late 
the would be 
have someone do a lot of the legwork 
for me, and they 
professionals, so maybe I will ask for 


in process. It nice to 


are supposed to be 


their help. 

I’m also going straight to agencies in 
case human resources does turn out to 
be useless. I chose the three that treated 
me most professionally when I was last 
job hunting. Does anyone know of a 
better way to choose an agency? 

Almost immediately, I’m confront- 
ed with a common dilemma in securi- 
ty recruiting: A résumé arrives from a 
very young guy with highly detailed 


technical expertise in certain areas of 


Nothing else on the 
no outside inter- 


Unix security 
curriculum vitae - 
ests, no other areas of technical ex- 
pertise, almost no qualifications (left 
school at 16). 

So I ask the obvious question and 
get the predictable response: Yes, he 
does have a criminal record, but it was 
a minor offense, he’s paid the penalty, 
he’s straight now. 


Wanted: Dependable People 

He probably knows Unix security 
pretty well. However, I just plain don’t 
want to employ someone who's shown 
so clearly that he doesn’t abide by rules 
and regulations. How on earth would I 
manage him? Besides, we don’t really 
need such in-depth technical security 
expertise. 

The problems we're dealing with 
aren’t exactly rocket science: They’re 
simple matters of patching known vul- 
nerabilities and also distributing virus 
updates. We don’t need bleeding-edge 


| 
| 
| 
| 
| 
| 
| 
| 
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LINKS: 


www.computerassociates.com/ 
products/inoculateit.htm: Follow this 
link for information on Islandia, N.Y.- 
based Computer Associates’ Inocu- 
latelT and InocuLAN. A free personal 
version is available for download. 


www.sophos.com: The home page for 
Wakefield, Mass.-based Sophos, a 
source for Sophos Anti-Virus software 


www.trend.com: Cupertino, Calif.-based 
Trend Micro's Web site includes infor- 
mation on mail scanners and gateway 

canners, as well as desktop antivirus 
scanners. You'll also find a free down- 
loadable personal scanner that checks 
folders for Microsoft Corp.'s Outlook 
and removes viruses. 


www. jobserve.com: | have used Col- 
chester, England-based Jobserve Ltd.'s 
site to evaluate contract work rates, but 
postings are only for the U.K. 


www.stepstone.com: If you're trying to 
fill job openings in Europe, London- 
based StepStone ASA’s site is a good 
place to start 


gurus; need dependable, reliable 
people who'll get a basic job done. 
Maybe in a year or so, our security 


will be good enough to make us need 


we 


highly technical people. I'll look for- 
ward to that. 


The Salary Rocket 


Of course, we then hit the salary 
issue. One guy, only a year out of uni 
versity, wants about $53,000 per year. 
That’s about twice the average salary in 
this country and more than a school- 
teacher might ever earn in a single year. 
The junior hacker, with no work experi- 
ence at all, wants even more. 

There are a few guys around with 
half decent experience in security and 
the right technical areas, but they’re 
looking for $60,000 or $70,000 per year. 
We'll probably end up paying even 
more than that, but then my company 
pays very good rates and expects very 
good people. 

Then the real kicker: I spot two ad- 
vertisements for short-term contract 
positions similar to my current job. 
Very similar, in fact — I doubt I'd have 
much problem getting the jobs if I 
applied. Salary? Just over triple my cur- 
rent salary. No benefits, no job stability, 
loads more stress, but triple the basic. I 
like my job; I really don’t want to move, 
but triple? 

Salaries in this industry are getting a 
bit silly. 


@ This journal is written by a real security manager, whose name and employer have been disguised for obvious reasons. It's posted weekly at www.computerworld.com to help you and our security manager - let's call him 
Jude Thaddeus - better solve security problems. Contact Jude at jude.t@lycos.com or click on Computerworld.com’'s Security Watch community forum to participate in discussion topics 





What was 
| thinking when 
| sent that email? 


Everybody makes mistakes. Take that 
email you sent out accidentally. If it 
contained confidential or sensitive 
company information, you're probably 
feeling like you have rocks in your 


head right now. 


But fear not. With MailRecall!” you 
can get your email back. MailRecall 
lets you manage the digital rights over 
your email at all times — even after 
you ve sent it. You decide who sees it, 
what they do with it, which parts of it 
they see, how long they see it for, who 
they can share it with, whether they 
can print it, save it or forward it — in 
short, everything about how it is used 
and distributed. 


Why take chances? Find out more 


about MailRecall. 


For a free trial or to order an 
evaluation kit for your company, 


visit us at www.authentica.com. 


Email you can get back — now that's 
food for thought. 


authent'ca 


protect your information 


877.532.8060 
781.487.2600 
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Kodak Crafts a 


TECHNOLOGY 


Keeper Camera 


As digital cam- 
eras proliferate, 
itgetsharder _- 
for one to stand * 
out from the 

rest unless it 

has some exotic 
features. But 
here’s one that 
does it the old- 


fashioned way - 


on all-around 
excellence. 
By Russell Kay 


VERY 
MONTHS 


SIX 
or 
this section 
takes a fresh look at 
newly 


so, 


what’s avail- 
able in the world of digital 
photography. I had originally 
planned to review two higher- 
end, relatively exotic cameras: 
Tokyo-based Sony Corp.'s new 
Mavica, which records on CD, 
and Melville, N.Y.-based Olym- 
pus America Inc.’s new, $2,000, 
4-megapixel (MP) Olympus 
E-10 reflex. But 
though these fascinating prod- 
ucts have been announced for 
some time, hold of 
them to far 
proved fruitless. 

What I have found is a sleep- 
er on the market, a digital cam- 
era that stands out on the basis 
handling 

picture 


single-lens 


getting 


review has so 


of all-around great 
high 


characteristics, 


quality and a complete line of 


accessories. To my surprise, 
this isn’t a product of a comp- 
any like Nikon Corp., Canon 
Inc. or Leica Technologies Inc., 
all known for making great 


cameras, but of Rochester, 


| teries. Exposure is easily vari- | 


KODAK'S DC4806 is simple and sleek, matching high-resolution 
photography with a relative bargain price 


mindedness and their 
cheapness. I haven’t been par- 
ticularly fond of Kodak’s digi 
tal cameras — I’ve found them 
somewhat cumbersome to use, 
with a tendency to eat batter- 


even 


ies at an alarming rate. 

But Kodak’s new, top-of-the- 
consumer-line DC4800 
ordinary-looking digital cam- 
era that ends up being some- 
thing special. First, it’s a 3.1MP 
camera, taking pictures at a 
resolution of 2,160 by 1,440 pix- 
It’s about average in 


is an 


els. 


(meaning that it’s considerably | 


smaller than its DC260, 280 
and 290 predecessors), costs 
just $799, cycles quickly be- 


tween shots and goes quite a | 


while on its rechargeable bat- 


| able, and you can set a specific 


N.Y.-based Eastman Kodak Co., | 
most of whose cameras over | 


the past half-century have been 


| noted more for their simple- | 


f-stop if you want to control 
depth of field. The 3x zoom 
lens performs well. 


make and don’t require con- 
sulting the manual. The cam- 
era has _ several 
modes, including one for satu- 


| eras 


size | 


Adjust- | 
ments and settings are easy to | 


shooting 


rated color and another that 
produces sepia-toned pictures. 
I tried these but chose to shoot 
everything in normal color; it’s 
always possible to change the 
color balance afterward, using 
photo-editing software. 
Although some digital cam- 
have 
this is the 
I’ve had a chance to wring out 
at some length with a comple- 
ment of optional telephoto, 


accessory lenses 


available, first one 


|} tures. 


| ley Forge, Pa., 


| era comes with only 


not 
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wide-angle and close-up lens- 
es. (These aren’t replacement 
or true interchangeable lenses; 
instead, they’re auxiliary op- 
tics that screw on to the front 
of the camera’s zoom lens.) 


| Why This One? 


As a one-time commercial 
photographer and photojour- 
nalist, I’ve used many different 
types of cameras. One legacy of 
that experience is that I don’t 
have a lot of patience for equip- 


| ment unless it’s quick and easy 
| to use, handles well in the field 
and takes sharply focused pic- 


The DC4800 excels in all 
those areas, and it just feels 
good in my hand. What’s more, 
with this machine, I find I don’t 
have to think so much about 
operating the camera and can 
concentrate instead on taking 
pictures. I’ve used other digital 
cameras that were quite good, 
but them were 
3MP cameras. And as good as 
those others were, the Kodak 
DC4800 just seems to feel and 
work better for me. 

On recent vacations to Val- 
and Kansas City, 
I found that the DC4800 


none of 


Mo., 


| captured some very nice im- 
| ages. Recording onto a 48MB 


compact flash card (the cam- 
a 16MB 
card), I could get 30 pictures at 
the camera’s highest resolu- 
tion, without compression, be- 
fore running out of space. 
Then I downloaded the pic- 
tures to the IBM ThinkPad X20 
(Technology, Oct. 16] by plug- 
ging the memory card directly 
into the laptop — easily the 
quickest and most painless sys- 
tem I’ve ever used. 

The Kodak DC4800 is a 
great camera for me. It might 
be so attractive to you, 
especially if you have bigger 
hands, but it’s clearly worth 
checking out. D 


Much Ado About Megapixels 


The state-of-the-art digital camera (at least for cameras you can buy) is 
at 4MP - cameras that can take photos that contain 4 million individual 
elements, expressed as a resolution of 2,240 by 1,680 pixels. What this 
means is you can take such a picture and have large prints made, either 
by one of the many service bureaus now printing digital photographs or 
by printing them with one of today's high-quality ink-jet photo printers. 
And these prints will be just about good enough in sharpness and color 
quality to rival those you'd get from an average camera using silver- 


based film. 


This level of quality isn't quite good enough for a studio photographer 
interested in ultimate sharpness and detail, but it's getting there. For a 
photojournalist, 4MP means that small sections of photos can be blown 
up considerably without losing information. 

If you want to post pictures on a Web site, you needn't worry about 
high resolution. Most Web photos are considerably less than 2MP or 
even IMP, so almost any decent digital camera will be good enough. 
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Data Mining Oracle MicroStrategy 
Analytics Business Objects MicroStrategy 
Financials Hyperion MicroStrategy 
Reporting Cognos MicroStrategy 


Statistics SAS MicroStrategy 





MicroStrategy 7 delivers the industry's best Business Intelligence performance in one, easy to deploy, easy to 
use platform. 





Data Mining: MicroStrategy’s Intelligence Server uses sophisticated data mining techniques that can 
identify important trends in your business operation. 


Analytics: MicroStrategy’s analytical engine is able to perform the most advanced analytical 
queries against any volume of data. 
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functions, capital budgeting, depreciation and currency conversions. 





Reporting: Superior reporting capabilities including advanced drilling, table pivoting and flexible 
formatting allow users to create presentation quality documents and customized reports. 


Statistics: MicroStrategy 7 is powered by an extensive library of mathematical and statistical functions, from 
descriptive statistics such as standard deviation and kurtosis, to hypothesis testing such as ttests and Fests. 


The Best of All, All in One. 
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TECHNOLOGY 


Comput 
Ina lest 


As researchers contemplate 
alternatives to silicon, 

the massive parallelism 
offered by DNA computing 
is intriguing, if not yet 
practical. By Jan Matlis 


NA COMPUTERS 

may be the platy- 

puses of the com- 

puting world — 

they’re physically 

unusual, with odd component 

parts designed to solve special 

problems. 

DNA computing include such 

nonelectronic items as test 

tubes, enzymes, electrophoret- 

ic gels and beads, gold-plated 

glass slides, E. Coli bacteria 

and, of course, deoxyribonu- 
cleic acid (DNA). 

DNA computing was ‘first 

used successfully in 1994 by 

Leonard Adleman, a professor 


DNA 
Computing: 
Step-by-Step 


Leonard Adleman, a professor 

at the University of Southern 
California, used DNA to solve a 
seven-node traveling salesman 
problem like the one in this 
diagram. The question he asked 
was: Given a set of nodes and 
directed vertices between them, is 
it possible to construct a path that 
starts at Node 0, ends at Node 6 
and passes through all of the 
other nodes only once? Here is 
the algorithm that Adleman used 
to solve the seven-node traveling 
salesman problem. The whole 
procedure took about seven days. 


Components of 


at the University of Southern 
California in Los Angeles, to 
solve a version of the Hamble- 
tonian Path — the so-called 
traveling salesman problem. 
Several other prototypes have 


been created since then. All of 


them have been used as proof- 


of-concepts to solve scaled- | 
down versions of larger, more | 


intractable problems. 


Aside from its curiosity val- | 
ue, DNA computing’s claim to | 


fame is that it takes advantage 
of a kind of massive paral- 
lelism that isn’t available elec- 


tronically or even optically. In- | 


side a test tube, literally tril- 


THE PROBLEM 
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lions of possible solutions can 
be generated in parallel. The 
problems that can be solved, 
however, need to be rigidly 
specified. None of these proto- 
types point a clear path toward 
mainstream computing. 


The Breakthrough 

Adleman used DNA to solve 
a seven-node traveling sales- 
man problem (see illustration). 
The question was: Given a set 
of nodes and directed vertices 
between them, is it possible to 
construct a path that starts at 
Node 0, ends at Node 6 and 


| passes through all of the other 


nodes only once? 

It’s the kind of resource-allo- 
cation question that might get 
the attention of someone in the 
front office of an airline. 

An enterprising information 
technology student might be 
able to take out a pen and solve 
the seven-node problem more 
quickly than Adleman’s DNA 
computer, which took about a 
week. But imagine if the prob- 
lem involved a traveling sales- 
man who had to visit 200 
nodes. Problems like this are 
called NP-complete problems, 
meaning their complexity 
grows exponentially as the 


4 
will: 
3 1 
oO ’ 6 
sa 
2 5 
ABOVE: The seven-node traveling salesman problem as solved by Leonard 


Adleman’s DNA computer. The solution is shown in green, with the nodes 
labeled in the order in which they are visited: 0->1>-2->3->-4->5>6. 


The vertex DNA and the complementary DNA are mixed 
in a test tube. Those strands of DNA that can bind will do so. 


For example, the complementary DNA for Node 0 could bind 


to part of the 0->1 vertex DNA 


Vertex 0>1 DNA 


(Node 0 suffix) (Node 1 prefix) 
(Complementary Node 1 prefix) (Complementary Node 1 suffix) 
Se  eaemeeminnedl 


Complementary Node 1 DNA 
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specification of the problem 
increases size 
When 
they electronic 
computer in its silicon. On the 
other hand 
mated that 
massively 


linearly in 


they 


get big enough, 
can stop an 
it has been esti 
using Adleman’s 
parallel DNA 
method to solve a 200-node 
graph could require a chunk of 
DNA that weighs more than 
the Earth. 

In solving the seven-node 
problem, Adleman assigned 
DNA codes to each element of 
the problem, which meant one 
code per node and one related 
code per directed vertex. In a 
test tube, he mixed versions of 
these DNA codes, which an- 
nealed to produce an unknown 
number of solutions, most of 
them probably wrong. 

Adleman then filtered out 
the wrong solutions by apply 
ing a series of criteria that 
worked logically and could be 
implemented in a test tube. 


Security Threat 


The promise of this tech- 
nique is that any problem that 
could be posed in a way that 
corresponds to the one Adle- 
man solved could theoretically 
be solved as well. 


TECHNOLOGY 


others have 


method 


Adleman and 


suggested that this 
could be used to crack the U.S. 
government’s Data Encryption 
Standard (DES), which is used 
data for 
transmission. Employing one 
of 2°° keys, DES is almost un- 


to encode sensitive 


crackable by the most power- 
ful supercomputers. 
But a DNA-based 
that 7 
quadrillion keys at once might 
have a chance. Though the 
DES RSA 
Data Security Inc. in Bedford, 
Mass., has stated that “with a 


method 
79 


could test all 


services company 


large enough key, one should 
be able to thwart any DNA 
computer that can be built.” 

A group of researchers at 
NEC Research Institute Inc. in 
*rinceton, NJ., reported in 
1997 that they had constructed 
a DNA computer to solve a 
“maximal clique problem” in- 
volving six nodes with ll con- 
nections. The question was: 
Given a set of nodes and a set of 
connections, what is the maxi- 
mum number of nodes that are 
directly connected? 

After assigning codes to the 
components of the problem, 
generating DNA to match the 
codes, mixing the DNA so it 


DNA comput- 
ers are unlikely 
to become... 
competitors for 
electronic 
computers. 


LEONARD ADLEMAN, 
PROFESSOR, USC 


could anneal and filtering and 
sorting the DNA, they incorpo- 
rated the remaining “solution” 
DNA into viruses and had the 
viruses infect E. Coli bacteria. 
The viral DNA in the bacteria 
multiplied (in the same way 


that viruses make people sick), 
DNA 


Chere 


“solution” 


multiplied 


and the was 


also. was 


then enough to sequence it and 


find the problem’s solution. 


Gold-Plated Research 


Researchers at the Universi 
ty of Wisconsin in Madison 
have used another type of 
DNA computer to solve a “sat 
isfiability problem,” in which 
binary numbers are tested to 
see if they satisfy a formula 
and produce “binary true,” or 
the number 1. Their prototype 
had to test 32 sequences. A 
problem scaled up by a factor 
of four would have had to test 1 
million sequences. 

This effort DNA 
strands attached to a gold-plat 


used 


ed glass slide so the solution 
DNA wouldn’t be accidentally 
washed down the drain. Wrong 
solutions were broken 
and washed away. 


down 


As has been pointed out, 
most of these DNA computa 
tion schemes involve breaking 
down the computer every time 
they are used. Unlike electron 
ic instructions, which can be 
rerun with the push of a button, 
there may be more setup re 
quired to run a DNA computer 
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A programmer who is used 
to debugging code by running a 
sample case over and ove 
again have to 


may come 


with a new paradigm. Wha 
might, in an electronic envi 
ronment, appear to be a sim 
ple, algorithmic change, such 
as requiring Adleman’s sales 
man to visit one of the nodes 
without 
might, in a DNA 


environment, require an en 


twice, specifying 


which node, 


tirely new system of filtration 
and sorting, and possibly 
ferent approach to spe 

the problem 

inlike 


lone com 


“DNA computers are 
ly to become stand 
petitors for electronic comput 
rs,” says Adleman 

Their 


most productive ap 


plication, suggests John Reif, a 
professor at Duke University’s 
computer science department 
in Durham, N.C., might be in 
streamlining the decoding and 
DNA 


that’s being done int fuman 


processing of natural 


Genome Project and in crime 


laboratories. D 


Matlis is a freelance writer in 
Newton, Mass. He can be 
reached at jmtgpcmcm@ 


aol.com. 


After the DNA has been incubated for the 
right length of time at the right tem- 
perature, and the set of answers, including 
the “right” one, has been amplified, 
‘wrong” sequences are discarded. 


Each node is assigned a 20-base 

code. The bases consist of the four 
DNA nucleotides (abbreviated as A, T, C 
and G); the prefix and suffix for each node 
must be unique. 


codes. The suffix of the departure node is 
attached to the prefix of the arrival node. 


Complementary DNA for this example would be: 


geen 
TTAGCAAGTC CGATCAGGTA 


(Complementary 
Node 0 prefix) 


For example, the directed vertex 0->1 would be C 
Node 0 suffix) 


(Node 0 suffix) (Node 1 prefix) DNA sequences that don’t 
begin with Node 0 are filtered 
out. The DNA sequences that don’t 
AATCGTTCAG GCTAGTCCAT out 
TTAGCAAGTC CGATCAGGTA 
(Double strand (Double strand 
Node 0 prefix) Node 1 suffix) 


For example, Node 0 could be coded as: If the two strands of DNA were mixed together, 
they could bind in this way: 
The complementary DNA for each 
node that was assigned in Step 1 
is generated. Complementary DNA is DNA 
that binds to another strand of DNA. 
A nucleotides bind with T nucleotides; 


C’s bind with G’s. 


een ncrmemer ne meee a test A a NS SO 
AATCGTTCAG GCTAGTCCAT 
(Node 0 prefix) (Node 0 suffix) 


The DNA sequences are 

sorted by length. Only those 
sequences that have seven 20-base 
nodes are kept. 


| DNA to represent each directed 
vertex is generated from the node 


All DNA sequences that don’t 

have Node 2 DNA are filtered 
out. All DNA sequences that don’t 
have Node 3, Node 4 and Node 5 
DNA are filtered out. 


Laie eae 


departure point. Taking advantage of that fact, Adleman used bits of 
DNA consisting of either Node 0 suffix and Node 6 prefix and an 
enzyme to multiply all DNA chains that started with Node 0 or ended 
with Node 6. That way, in succeeding steps, it would be easier to 
manipulate the “right” DNA, and the sample would be large enough 
that it would be unlikely for it to disappear down the drain by accident. 


That strand could then bind to any vertex strand that starts with a Node 1 suffix. 
In the case shown here, it binds with a 1>-3 vertex DNA.* 


Vertex 0-1 DNA Vertex 1>~3 DNA 
(Node O suffix) (Node 1 prefix) (Node 1 suffix) (Node 3 prefix) 


If there is any DNA left, 

it has all the right properties: 
It starts with Node 0, ends with 
Node 6, visits each node and has a 
length that means it only visited six 
nodes, which implies it visited each 

node once. Sequencing the 

DNA will reveal the order of the 

codes and provide the solution. 


(Complementary (Complementary 
Node 1 prefix) Node 1 suffix) 


ete carnation meee mater at sell 
Complementary Node 1 DNA 


Note that the way the problem was set up, there are no vertices that 
have Node 0 as a destination and no vertices that have Node 6 as a 


*Note: In this example, the “wrong” vertex DNA 
bound to the strand, so this strand will 
eventually be discarded 
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The pieces are starting to 

fall together for Linux to 

a play a central role in the 
MHEG RRS GM 

SAE Uearl 


ORPORATE IT HAS FULLY EMBRACED LINUX and oth- 
er open-source products as standard elements 
in its Internet infrastructure, but most infor- 
mation technology managers haven’t deployed 
Linux inside the data center and say they are 
unlikely to do so in the coming year. 

So just what will it take for Linux to gain access to the cor- 
porate data center? Right now, Linux lacks several things. The 
open-source platform needs the multiprocessor support and 
large RAM capacity necessary for major data center opera- 
tions. It needs better development tools and packaged appli- 
cations (those available today pale in comparison with what’s 
available for Windows and Unix). And top management 
needs to warm to the idea that the open-source operating sys- 
tem can step into a central role in the enterprise. 

Until that happens, users and analysts say, Linux will re- 
main a profound technology asset for the Internet but not the 


enterprise. See Linux, page 10 GREDE FOUNDRIES’ Rich Smrcina says Linux helps with server consolidation 
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LINUX: 


Ready 


Continued from page 108 

Linux roared into the spring of this 
year. Framingham, Mass.-based Inter- 
national Data Corp.’s (IDC) study last 
year of server operating system market 
share showed Linux with nearly 25% of 
the market, up from practically nothing 
in 1998. With the perpetual delay of 
Windows 2000 
users had plenty of time to experiment 
and get comfortable with Linux. 

This year looked like it would be an- 
other great one for Linux, but it turned 
into a time of crisis for most of the Lin- 
ux-only players. When the dot-com 
stock bubble burst in April, the 
nascent Linux investors took a finan- 
cial bath. The big three Linux vendors 
Red Hat Inc. 


last year, corporate 


— Caldera Systems Inc., 


and VA Linux Systems Inc. — plum- | 


meted between 80% and 90% in value. 


RICH SMRCINA says, “The jury is still out,” 
regarding a move to port business or manu- 
facturing applications to Linux 


TECHNOLOGY 


Others suffered more than paper set- 
backs. Linuxcare Inc. in San Francisco 
jettisoned its CEO and some employ 
ees, scrapped its initial public offering 
(IPO) and revised its business plan. A 
hot prospect, Brisbane, Calif.- 

TurboLinux Inc., slashed 
workforce of 2,000 employees in half, 
replaced its CEO and had to pull back 
from the IPO arena. 

Linux’s reputation also suffered out- 


very 


based its 


side of vendors’ business woes. Techni- 
cally, the operating system lagged its 
competitors in key technology areas. 
The current Linux kernel can’t manage 
more than four Intel processors — barely 
an entry-level system in today’s data cen- 
ter. The next release, Version 2.4, is said 
to be able to handle eight-way Intel sys- 
tems. That’s impressive, but it’s still well 
behind Unix and Windows 2000. Memo- 
ry capacity will also get a bump up from 
its paltry 4GB limit to a competitive 
64GB. But the release is running late, 
which is slowing Linux’s momentum. 

It also doesn’t help that Linux lacks 
broader application support. IDC ana- 
lyst Dan Kuznetsky puts it bluntly: “Lin- 
ux simply needs more packaged apps.” 

Finally, Linux lost much of IT man- 
agers’ attention this year as Microsoft 
Corp. finally released its new flagship 
operating system piecemeal throughout 
the year. According to Kuznetsky, dur- 
ing the next two to three years, fitting 
Windows 2000 into the enterprise will 
be a more pressing matter to IT man- 
agers than experimenting with Linux. 

That said, Kuznetsky adds that he be- 
lieves Linux “is making it in the corpo- 
rate world.” He points to its increasing 
IT workload as the operating system 
for Web, firewall, page caching and oth- 
er Internet-related servers. He says he 
doesn’t expect to see many companies 
the size of Burlington Coat Factory 
Warehouse Corp. deploying the operat- 


Linux got a bad 
rap that it was 
harder to use 

than Windows. 


DENNIS POWELL, AUTHOR, 
CONTRIBUTOR TO LINUXPLANET.COM 


ing system so pervasively as the retailer 
has in its Burlington, N.J., headquarters 
and its hundreds of stores. But Linux, 
Kuznetsky says, doesn’t need that kind 
of support to grow. Indeed, with its sol- 
id foothold in IT, Linux today is well 
positioned to gradually take on greater 
responsibilities in the data center. 


Making Inroads 

Linux is a big hit with Milwaukee- 
based Grede Foundries Inc. The $600 
million iron and steel manufacturer has 
shifted the lion’s share of its Internet in- 
frastructure to Linux running on an 
IBM S/390 mainframe. Linux current- 
ly handles domain-name server func- 
tions for the corporate virtual private 
network, runs sendmail for company 
e-mail, supports Apache Web servers 
and monitors some network tasks. 

Grede’s manager of operations, Rich 
Smrcina, says bringing these services 
onto the mainframe helps with his com- 
pany’s ongoing server consolidation 
strategy by saving hardware costs and 
data center real estate. But the compa- 
ny isn’t ready to port business or manu- 
facturing applications to Linux yet. 





Even at Grede Foundries, where Linux 
is a demonstrable success, top execu 
tives remain on the fence. 

“The jury is still out inside [IT] here,” 
Smrcina says. “Not everyone is com- 
pletely sold yet.” 

At New York-based Amerada Hess 
Corp., where cutting costs is a corpo- 
rate constant, Jeff Davis says he be- 
lieves Linux is a perfect tool. The com- 
pany had ported its own proprietary 
seismic-data analysis application to 
Unix before beginning a migration to 
Linux two years ago. As a result, the se- 
nior systems programmer for the $10 
billion energy giant’s exploration divi- 
sion says his group replaced $3 million 
to $4 million worth of leased Unix sys- 
tems with a $700,000 Linux cluster of 
200 two-processor Intel machines. 

“Not only did we save money, which 
everyone around here really likes, but 
we got 10 times the capacity,” Davis 
says. Still, mainstream business appli- 
cations remain on non-Linux systems. 

Linux has even more momentum 
outside the U.S., particularly among 
fast-growing Internet companies. In 
Germany, the best-known public dot- 
com business is Web.de AG in Karl- 
sruhe. According to CEO Matthias 
Greve, the company chose Linux to run 
its Web-based business because it kept 
hardware costs down. 

Each of Web.de’s 200 Linux boxes is 
equipped with 1GB of RAM and 70GB 
drives. Its database server, which han- 
dles more than 5 million unique users 
per month, runs Oracle Corp. software 
and has terabytes of storage online. 

Greve says his Linux data center cost 
less than one-fourth of what it would 
have had he ordered similarly config- 
ured Unix systems from Sun Microsys- 
tems Inc. However, had Sun’s RISC 
hardware been more affordable, his 
company might be running Solaris and 
not Linux, he says, suggesting that costs 
drive business decisions to work with 
Linux rather than any inherent advan- 
tage of the operating system. 


If Not Now, When? 


Linux is a heavyweight operating sys- 
tem for Internet operations. But some 
wonder when, if ever, it will transcend 
the inherent problems that have kept it 
primarily in that niche. 

According to Dennis Powell, an au- 
thor and contributor to LinuxPlanet.- 
com in Darien, Conn., “Linux got a bad 
rap that it was harder to use than Win- 
dows.” Worse, Powell says, are the bat- 
tles among the various distributions that 
can create version incompatibilities and 
cause concern and confusion among IT 
planners. 

“Linux is too amorphous for corpo- 
rate strategists,” says Harve Tannen- 
baum, an analyst at Boston-based Sum- 
mit Strategies Inc. 

Broader acceptance may have to wait 

See Linux, page 112 
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Continued from page 110 

for more enterprise-class ap 
plications to arrive. Burlington 
Coat CIO Mike 
Prince’s experience underlines 
this problem. He says that until 
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new 
| last month, he says, Linux “got 
| equal billing to other environ- 
| ments.” Prince concurs, adding 
| that Oracle’s latest product in- 
| troduction featured Linux on 
| the same footing as Unix and 
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and PeopleSoft Inc. release 
Linux versions on the same 
schedule as other platforms. 

This is true for Linux run- 
ning on Intel-based systems. 
But users running Linux on 
other processors aren’t as well 
off. Although Smrcina says he’s 
quite happy to run Internet op- 
erations on Linux inside his 
S/390, he wants to do more. 
But he must wait until IBM re- 
leases its middleware for Linux 
on mainframes. He says he ex- 
pects to be experimenting with 
DB2 and MQSeries products 
when IBM ships Linux ver- 
sions early next year. 


Big-Time Backers 

Despite Smrcina’s impa- 
tience, he says he’s been im- 
pressed with IBM’s and other 


vendors’ commitments to Lin- 


ux. When IBM rolled out its 
64-bit Z900 mainframe 


Windows. 

The marquee list of compa- 
nies that have lined up behind 
Linux is impressive. All of the 
major systems makers offer 
technical support for Linux on 
their machines. And Linux com- 
panies that were drowning in 
red ink earlier in the year have 
been given significant cash in- 
fusions by industry giants. 

Linux is also leveraging its 
position as the operating sys- 
tem for server appliances, says 
Tannenbaum. Like LANs and 
PCs, he says, “Linux is getting 


| into corporate America through 


the back door.” 

And Linux isn’t limited to 
large IT shops with strong in- 
ternal technical support, ac- 
cording to Kuznetsky. In the 
small and medium-size busi- 
ness market, value-added re- 

have been shedding 
themselves of Novell Inc.’s 
NetWare, The Santa Cruz Op- 
eration Inc.’s systems and oth- 
er platforms in favor of Linux, 
while Windows continues to 
hold its own, Kuznetsky says. 
And major developers such as 
Oracle have jettisoned margin- 
al platforms, such as NetWare, 
for Linux. 


sellers 


So next year is beginning to 
look like a good one for Linux. 
Will it be the big year that Lin- 
ux makes inroads into the data 
center? Probably not. But it 


| might just be the year that all 


the pieces come together. D 
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Early adopters of 
SQL Server 2000 
report that this 
newest Microsoft 
database is better | 
than its predeces- 
sors — and better 
than Oracle or DB2. | | ) 
rR. r NI. . . 
By Barry Nance | 
‘ l’S BEEN A LONG TIME since Mi- 
= crosoft Corp. first entered the 
database world with a relabeled 
* version of the Sybase relational 
database management system. | 
=». From its humble beginnings, the 
Microsoft product has taken over the SQL 
Server name (Sybase Inc.’s SQL Server is 
now called Sybase Adaptive Server), lost 
all traces of Sybase programming, gained 
features that rival those of Oracle and be- 
come an integral part of Microsoft’s back- | 
office strategy. 
It’s not perfect, of course. SQL Server 
2000 runs only on Windows NT 4.0 or 
2000. It lacks IBM DB2’s high level of 
support for static SQL. It can’t run stored 


procedures as flexibly or as powerfully as 

Oracle can. Its native programming inter- 

face isn’t as well-known as Oracle’s. It 

doesn’t integrate as easily as Oracle, DB2 

or Adaptive Server with Java-based appli- 

cation server environments such as San | 
Jose-based BEA Systems In bLogic 

or IBM’s WebSphere — especially if 

they’re based on Enterprise JavaBeans. 

Despite these and other shortcomings, 
early adopters of SQL Server 2000 say 
they’re pleased with the new version of 
Microsoft’s RDBMS. Microsoft recently 
shipped the newest upgrade of its pre- 
mier database, and Computerworld ap- 
proached four early adopters to see how 
satisfied they are so far. Their reactions 
were distinctly positive. 

This profile of early SQL Server 2000 
use shows why, at least at the large work- 
group level, Microsoft appears to be ready 
to make significant inroads against en- 
trenched competitors like Oracle Corp. 





Microsoft Builds on Server Side 
“We're at a point when people are 
waking up to how powerful Windows 
NT, Windows 2000 and Microsoft’s 
server-based products are. The whole 
Unix and Java world has been over- 
hyped,” says Will Zachman, an analyst at 
Stamford, Conn.-based Meta Group Inc. 
“In contrast, Microsoft has been steadily MATTHEW DROOKER, vice president 
building and improving its server-side of systems development at Turner 
products, such as SQL Server 2000, to be TREC er SSC Rese: Mr) ROMY ol 
able to give customers useful and reli- Oe UM e-1-aieRLReL 
able software.” ORCA meme acR UCTS 
Zachman describes SQL Server 2000’s which works well with SQL Server 





ANN STATE 


TECHNOLOGY 


market potential as almost limitless. 
“I’m very impressed with what Micro 


Matthew Drooker, vice president 
of systems development at Turner 


soft is bringing to the table,” he says. 


Broadcasting Sales, says his cable TV 
advertising sales organization chose 
SQL Server 2000 because his develop 
ment team has a lot of experience 
with earlier versions, the system inte- 
grates well with the team’s tools and 
it’s an appropriate solution for storing 
sales data from his approximately 220 
users. The database stores informa 
tion about advertisers, advertising 
agencies, sales orders and broadcast 
details in about 300 tables. 

Turner Broadcasting Sales is a divi- 
sion of Turner Broadcasting System 
Inc. (TBS), a subsidiary of New York- 
based Time Warner Inc. Atlanta-based 
IBS is a leading cable TV content pro- 
vider and owns outlets such as TNT, 
Cable News Network Inc. and the TBS 
Superstation 

When the sales staff and company 
executives needed a more efficient 


way to both create and access sales 
data, TBS developed a set of appli- 
cations based on SQL Server 2000. 


SQLSERVER 2000 V5. THEWORLD 
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Scalability 
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NT or 2000 


Buy more Windows NT 
or 2000 computers 


Any manufacturer whose 
machines run Windows 


Drooker characterizes TBS as a 
longtime user of SQL Server and Win- 
dows. He has a small group of develop- 
ers — about 10 people — which he says 
definitely prefers and has come to rely 
on Microsoft’s Visual Studio 6.0, in- 
cluding Interdev, Visual Basic and 
Visual C++. 

Zachman says he agrees that Visual 
Studio 6.0 and SQL Server 2000 are an 
excellent combination. “Microsoft has 
server-side development tools that 
blow away anything other vendors 
have. IBM’s VisualAge, for example, 
is primitive in contrast,” he says. 

TBS’s sales-oriented applications 
generate proposals, track orders, pro- 
duce reports and interface with legacy 
billing systems that run on its Unisys 
Corp. mainframe. Drooker says SQL 
Server’s Data Transformation Services 
(DTS) component has been a great 
time-saver in building and processing 
interface files. Little programming ex- 
pertise or effort is required to use the 
graphical DTS tool to produce pro- 
grams that convert files from one for- 
mat to another. 

The tool, he says, produces Visual 
Basic code, which means his team can 


Buy fewer but larger 
and more expensive 
computers (Unix or 
MVS) 


Oracle runs on about 
92 platforms, including 
Unix and Windows 
NT and 2000 


Programming 
tacts 


Application servers 
(es ue 
WebLogic or IBM's 
WebSphere) 


Java support 


Windows NT and 
2000 programmers 
are readily available 


Not great 

Not great 

First-class; built-in 
Plentiful and high-quality, 
from Microsoft and third 
parties 


Data Transformation 
Services is superior 


Little support 


Oracle’s APT is well- 
known, but program- 


mers are Unix-flavor- 
specific 

DB2 excels 

Oracle excels 

Not great 

The best tools run 

on Windows NT and 
2000 


Hire another 
programmer or two 


Easily integrated 
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add business logic quickly and easily. 

In addition, Drooker says, the inte 
grated and easy-to-use programming 
environment surrounding SQL Server 
lets the development team build effec 
tive work-arounds for problems that 
previously may have required the use 
of expensive consulting help. 


Shopping for a New DBMS 


Scott Mitchell, chief technology 
officer at Home Shopping Network 
(HSN) in St. Petersburg, Fla., chose 
SQL Server 2000 primarily for its scal- 
ability. He says he likes being able to 
add horsepower in fine, inexpensive 
increments by simply buying addition- 
al Intel-based servers. 

“Tt increases our agility and improves 
our ability to change in response to 
market forces,” Mitchell explains. “The 
Windows programming environment 
affords me access to a more robust la- 
bor market. It also greatly simplifies 
vendor management, because I’m not 
tied to a single hardware vendor and a 
single flavor of Unix.” 

In May, Mitchell says, HSN decided 
to migrate the database tier of its Web 
site’s e-commerce application from 
Solaris-based Oracle running on Sun 
Microsystems Inc. computers to SQL 
Server 2000 and Windows 2000 Ad- 
vanced Server running on Intel-based 
servers. 

Mitchell echoes Drooker in describ- 
ing the ease of programming in the 
Windows environment, which has re- 
duced the time it takes to add improve- 
ments to the HSN Web site. The data- 
base tier migration took less than six 
weeks. Mitchell says HSN has also 
seen improved performance, simpli- 
fied vendor management and reduced 
hardware, software and support costs. 

Like TBS, HSN runs its core busi- 
ness — including inventory, order 
management and fulfillment — using 
a series of legacy applications running 
on a Unisys mainframe. To extend this 
functionality to the Internet, HSN 
used to rely on a mixed-platform solu- 
tion a third party developed for the 
company. 

The presentation and business-logic 
tiers of HSN’s Web solution consisted 
of Microsoft Internet Information 
Server and Windows NT running on 
six two-processor Intel-based servers. 
The HSN Web site processes about 18 
million page views per month, and that 
number is growing rapidly. 

The data tier, consisting of catalog 
data, the customer database and com- 
munity content such as the site’s mes- 
sage boards, resided in Oracle8i run- 
ning on a Sun computer. Information 
transfer between the Web platform 
and the mainframe was accomplished 
through twice-daily bidirectional batch 
transfers; new orders were sent from 
the Web platform to the legacy system, 

See SOL Server, page 118 
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while inventory levels and order status 
were sent in the opposite direction. 

Mitchell says HSN was experiencing 
system performance and availability 
problems, and the mixed solution 
made it more difficult and time-con 
suming for developers to fix problems 
and optimize performance. Having 
multiple vendors and support organi- 
zations added complexity, and staffing 
was also more difficult because HSN 
needed to recruit people with exper- 
tise with two very different systems. 

In August, HSN replaced the Sun/ 
Oracle data tier with a cluster of two 
Compaq Computer Corp. 8500 servers, 
each populated with four processors 
running Microsoft Windows 2000 Ad- 
vanced Server and Microsoft SQL 
Server 2000. 

The two-node cluster, which access- 
es shared external disk storage, is con- 
figured in an active/passive fail-over 
configuration to maximize availability, 
using the fault-tolerant functionality 
provided in SQL Server 2000. HSN 
selected the eight-processor-capable 
Compag servers so it could scale up to 
meet customer demand by simply 
adding processors, says Mitchell. 


Growing Acceptance 

Cary Gottesman, a Microsoft consul- 
tant at AT&T Growth Markets in North 
Brunswick, N.J., says AT&T selected 
SQL Server 2000 primarily because of 
its online analytical processing (OLAP) 
capability, its performance and its 
greater maximum database size. He 
says SQL Server 2000's increased cube- 
size limit (over SQL Server 7.0) makes 
it the right tool for the job. 

AT&T Growth Markets, an $8 billion 
business unit of the AT&T Business 
Services division, depends on what it 
calls its Attack Database to provide a 
wide array of information to field sales 
personnel. First developed using SQL 
Server 7.0, this database provides ac- 
cess to just under | terabyte (TB) of 
data that sales staff use to quickly 
identify and target new telecommun- 
ications business opportunities. 

Accessed via a browser-based front 
end, the database provides OLAP and 
other functionality that lets sales rep- 
resentatives see, for example, what 
kinds of communications services a 
business has, the potential revenue a 
customer may offer and the existing 
infrastructure that will shape a cus- 
tomer’s choices. 

Gottesman says database usage is 
spreading quickly among AT&T’s sales 
force. Moreover, the database’s size 
has grown to include new information 
from internal sources, such as AT&T 
billing records, and external informa- 
tion from business and financial profil- 


ing services. It currently contains more | 


than 40 million rows in a star/snow- 
flake design that facilitates OLAP 
views of the data. For example, sales 





staff can choose to view customer data 
based on demographic category, indus- 
try or region. 

Individual customers are represent- 
ed in 24 million of the 40 million rows. 
With SQL Server 7.0, Gottesman points 


| out, AT&T Growth Markets was able 


to support only a few million cus- 
tomers. However, the Analysis Ser- 
vices in SQL Server 2000 can scale up 
to tens of millions of customers in 
multidimensional OLAP and more 
than 100 million in relational OLAP. 
Gottesman says the success of the 
Attack Database has created additional 
challenges. Keeping the information 
fresh requires rebuilding about SOOGB 


| of the database on a monthly cycle. 


The entire data warehouse exceeds 
ITB when all tables, indexes and OLAP 
cubes are included. 

According to Gottesman, switching 
from RAID Level 5 to RAID Level 0 


gave AT&T its biggest performance 
| gains in the database-rebuilding oper- 


ation, dropping the time for a single 


| clustered index build from 32 hours 


to four hours. A faster server further 
reduced the time to one hour. And 
switching from SQL Server 7.0 to SQL 
Server 2000 shrank the index build 
time even further, to only 15 to 20 min- 
utes. The monthly database-refresh 
cycle that used to take more than four 
weeks today takes about a week. 


| AVote for SOL Server 


Gregg McGilvray, chief technology 


officer at Election.com Inc., says he 


feels that SQL Server 2000 scales well, 
is less expensive than comparable 
databases and has better tool support 
in the developer community. 
Election.com is a global Internet 
election-services company in Garden 
City, N-Y., that provides public- and 
private-sector election services for 
governments, associations, nonprofit 
organizations, labor unions, school dis- 
tricts, credit unions, pension funds and 


corporations. 


The company helps voters around 
the world make the transition from pa- 
per ballots to online voting. Clients in- 
clude the Sierra Club, the United Na- 
tions Federal Credit Union and the 
Arizona Democratic Party. As the 
company expands into different mar- 
kets, it’s taking on much larger elec- 
tions in the U.S. and abroad on a re- 
gional, state and national level. These 


| business opportunities represent enor- 


mous variations in the number of votes 
being counted. 

“Depending on the bylaws of a par- 
ticular organization, we may need to 
build additional tables, add data types, 
manage indexes and otherwise adapt 
to constantly changing elements to 
meet the needs of our clients,” McGil- 
vray says. “SQL Server 2000 helps us 
to do that with an easy-to-understand 
interface. It’s also a lot more cost- 


| effective than the alternatives.” 
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McGilvray says Election.com chose 
SQL Server 2000 because it provides 
both the flexibility to rapidly adjust its 
offerings to different election-format 
scenarios and the scalability to assist 
the company in handling major juris 
dictional elections. 

One of Election.com’s largest proj- 


| ects was the recent Youth-e-Vote 





| 2000, an online election for U.S. 
| school children, who were able to 


vote for the next U.S. president just 
prior to the actual election. 
“That’s an example where we were 


| awarded a project that has very differ- 


ent requirements than a standard 
election,” McGilvray says. “We had to 


| add additional tables and reporting 


mechanisms at different levels in the 
system. SQL Server enabled us to do 
this very quickly and to deploy the 
online voting system in time to meet 
the requirements of the project.” 


Passing the Test 

McGilvray’s team has successfully 
stress-tested its voting application at 
20 million votes per hour. 

“The OLAP function in SQL Server 
2000 is already helping us in creating 
rapid election-reporting services. It’s 
also opening up new ways to interpret 
voter data and voting patterns,” he 
says, adding that the company also ex- 
ports SQL Server-based data to Excel 
spreadsheets and uses Visual Basic to 
generate reports. 

“For example, we can look at how 
often people tend to vote for the first 
person on a ballot simply because of 
that position on the ballot,” McGilvray 
says. “If we uncover a high percentage 
of this kind of voting behavior, then we 
can offer to rotate candidates’ names 
on a ballot.” 

Election.com has also found SQL 
Server 2000's DTS to be an effective 
tool, says McGilvray. “We import a lot of 
data, either from membership files from 
organizations or from voter registration 
files,” he says. “Typically, they arrive in 
sequential, flat-file format. We’ve found 
that DTS is very efficient in loading that 
data into SQL Server 2000.” 

Meta Group’s Zachman sums up the 
competitive database marketplace by 
declaring that the industry’s choices 
come down to DB2, Oracle and SQL 
Server. “I believe that, long term, SQL 
Server 2000 is in a great position to 
gain a lot of traction and market 
share,” he says. “Windows’ ability to 
run on many different server vendor 
platforms is attractive for Windows 
users. Unixes lock you into expensive 
hardware.” D 


Nance, a software developer and consul- 
tant for 29 years, is the author of Intro- 
duction to Networking (fourth edition), 
and Client/Server LAN Programming. 
You can reach him at barryn@erols.com. 
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Competitors predicted 
the death of the router, 
but experts wonder 
whether it makes more 
sense to move routing 
smarts to small devices. 
By James Cope 


Should routing be done fast and dirty, or smart and elegant? 

That’s the question facing many network man- 
agers, who see the convergence of voice and IP 
networks, increases in data traffic and new kinds of 
devices attached to the network as a wave threaten- 
ing to engulf them. Some want to throw bandwidth at 
the problem, while others say building routing intel- 
ligence into other devices will spread the load and 
make networks more efficient. 

Carl Wood, data communications manager at 
Tyson Foods Inc., says he hopes to add phone traffic 
to a network that links more than 200 remote offices 
to the company’s headquarters in Springdale, Ark. 

Wood and other experts wonder whether tradi- 
tional routers and routing schema are the best way to 
direct new types of network traffic and to give prior- 
ity to specific types of traffic such as payroll, which 
should have priority on certain days of the week. 

Wood, for example, is considering using the IP 
routing capabilities built into AT&T Corp.'s frame- 
relay service to let the service provider handle rout- 
ing of voice calls over IP. This would mean Tyson 
wouldn't have to handle voice-over-IP routing in its 
network infrastructure. 

Jerald Murphy, an analyst at Meta Group Inc. in 
Stamford, Conn., says the debate among inter- 
networking experts centers around whether the 
ever-increasing load on the routing infrastructure 
can be best handled by adding smarter routing tech- 
nologies that can work within the confines of static 
and sometimes-limited bandwidth. The alternative, 
he says, would be to expand available bandwidth us- 
ing optical connections, Gigabit Ethernet or other 
high-bandwidth links. 

More specifically, in a situation where a T] line 
running at 1.5M bit/sec. is the fastest pipe connecting 
sites, routers can be set to classify traffic by IP 
address, which could, for example, give data between 
points A and B on the network precedence over traf- 
fic between points D and C. However, if the connect- 
ing pipe is running over optical fiber at OC-192 
speeds, or 10G bit/sec., there may not be a need to 
prioritize traffic, because the bandwidth is high 
enough that nothing has to wait 


Close to the User 

One scheme to smarten the network comes from 
Nortel Networks Corp. in Brampton, Ontario. Nortel 
is promoting OpenIP, a suite of routing development 
software that it developed and offers to resellers. 

OpenIP technology is designed to build routing 
savvy into any device that has an IP address, by let- 
ting it bypass routers and hop on its own from net- 
work to network 

Kalai Kalaichelvan, general manager of Nortel’s 
OpenIP division, claims that routers are a bottleneck. 
He says it makes more sense to put routing intelli- 
gence into bunches of small devices that are closer to 

See Routing, page 122 
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TYSON FOODS’ Carl Wood says adding voice traffic to his 
network will seriously affect his routing requirement 
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the user, such as cell phones and personal digital as- 
sistants, than it does to make large routers at the out- 
er edge or at the inner core of networks responsible 
for directing all the traffic. 

With OpenIP, according to Kalaichelvan, manufac- 
turers can write code into a device to give it the abili- 
ty to understand routing algorithms. That allows the 
device to receive and forward packets over the net- 
work without a router. 

“It is not the router that is important; it’s the rout- 
ing as a function that’s important,” Kalaichelvan says. 
“We have to open this [routing functionality] and 
have routing intelligence in other devices.” 

That idea is a little far-fetched, says Charles Boyle, 
director of research and co-founder of Digex Inc., a 
managed network and application outsourcer in 
Beltsville, Md 

“It used to be that you could manipulate routing 
tables by hand by using all of your tools and service 
mechanisms to figure out paths,” Boyle says. When 
you work that way, “you have to monitor your net- 
work extensively.” 

However, if Nortel is trying to build the equivalent 
of routing tables into small devices in a home office, 
for example, who would be responsible for trou- 
bleshooting a PC that does routing when something 
goes wrong? he asks. “My stereo, [for example], isn’t 
a real good router,” Boyle quips 

Tom Russell, director of marketing for high-end 
routing platforms at Cisco Systems Inc. in San Jose, 
says he agrees that devices close to the user will 
eventually become more IP-addressable. 

Now network managers are looking for ways to 
increase routing control and the performance of IP 
networks by prioritizing traffic, adding security and 
engineering traffic. The latter, Russell says, refers to 
predetermining paths through router settings that 
enable a service provider to send priority traffic over 
its own network while routing less-critical traffic 
over the public Internet. 

Meta Group’s Murphy questions the concept of 
transferring routing to a variety of small devices not 
previously endowed with routing intelligence. He 
says he prefers high-bandwidth optical networks, a 
category in which he and other analysts say Nortel 
has focused and is leading. 

Too much routing intelligence at the core of a net- 
work slows it down, says Alexander Muse, president 
and CEO of LayerOne Inc., a Dallas integrator that 
sets up optical network interchanges for service 
providers. 

Muse says that because updating networks to | 
make devices smart is expensive and time-consum- | 
ing, most routing at the core of the network should 
be done “dumb and fast” at the optical transport lay-_ | 
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er, without regard for what types of traffic and proto- 
cols are traveling on the wavelengths of light. That 
leaves it to routers to determine classes of traffic at 
the network edge. 

No one who thinks seriously about high-perfor- 
mance network architectures is happy about putting 
more intelligence at the core, says Tim Lance, chair- 
man and president of NyserNet Inc., a Syracuse, N.Y.- 
based not-for-profit internetwork that connects uni- 
versities and researchers throughout New York. 
Lance predicts that more intelligence, including rout- 
ing, will show up at the borders of the network, par- 
tially because the applications on the network will 
have widely varied requirements 


What Works? 


Tyson’s Wood says he’s more interested in what 
works and conserves money and resources than he is 
in vendor strategies. 

Wood says the hub-and-spoke wide-area network 
works well enough for data that flows between cor- 
porate and branch operations. But adding telephone 
calls over Tyson’s network using voice over IP may 
strain its existing architecture. It would mean calls 
made from one regional office to another would have 
to come through routers to Tyson’s headquarters, 
and then go back out through the network to their 
destination. That, he says, could force him to expand 
Tyson’s core network infrastructure, which means 
additional capital expenses and increases in ongoing 
maintenance costs. 

Wood says he could avoid those headaches by 
piping the IP traffic over AT&T’s frame-relay net- 
work — essentially avoiding the question of how to 
revamp his routing network by letting the carrier 
handle it 

The idea of sending IP data packets over frame 
from one point to another isn’t new, but Tim Halpin, 
product manager for frame and Asynchronous 
Transfer Mode services at AT&T, says adding IP 
routing capabilities that facilitate delivery among 
many locations is. 

“Now, instead of just getting packets from one 
point to another, it’s like the network becomes one 
big router,” Wood says. 

Diminishing the role of the router by increasing 
bandwidth or by adding routing intelligence to more 
devices would no doubt be disconcerting to leading 
vendors like Cisco, which has the lion’s share of the 
market, according to Jim Slaby, an analyst at Giga 
Information Group Inc. in Cambridge, Mass. 

Although Cisco professes support of open routing 
standards, Slaby says, “Cisco has really built a bunch 
of proprietary extensions to existing standards that 
tend to work only with Cisco products.” 

Cisco employs a “hybridized” routing scheme, 
according to experts. The company’s scheme 
combines distance-vector routing and link-state 
routing. In distance-vector routing, routers regularly 
send copies of their routing tables to other routers 
nearby. Link-state routing uses algorithms that help a 
router compute the best path to a destination on a 
network. 

Among other things, this lessens the need to 
update sessions, such as a database query or an 
e-commerce transaction, and gives more bandwidth 
to applications and less to the routing process itself. 

Ultimately, the question of whether colossal band- 
width will obviate smarter routing may become a 
moot point. As users run more services over inter- 
networks and longer distances, there will no doubt 
be a need for networks that have speed, capacity and 
a sense of direction. D 
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It’s not the router 
that is important; 
it’s the routing as 
a function that’s 
important. 


KALAI KALAICHELVAN, GENERAL MANAGER, 
OPENIP DIVISION, NORTEL NETWORKS 
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Applets and Servl 


BY JON UDELL 
HEN JAVA 

burst on the 

scene, ap 


plets were 


the stars of 


the show. It was already clear 
that the HTML browser was a 
wonderfully appli- 
cation platform, although not 


universal 


Applets 
both 


a very rich one. 


promised the best of 
worlds: the zero-install, “write- 
once, run anywhere” qualities 
of pure HTML and the rich- 
ness of the native graphical 
user interface (GUI). 

So far, that 


vision hasn't 


panned out. A recent 
pegged the use of Java applets 
Web’s 500 most-traf- 
sites at than 2%. 


survey 


on the 
ficked 
Why? Some developers fault 
the overhead of interpreting 
bytecode in the Java virtual 
machine (JVM). Others blame 
I that 
prevents Java from fully ex 


less 


the “security sandbox” 
ploiting local and remote ser- 


vices. Still others cite differ- 
ences among the major brows- 


ers’ JVMs 
son, after half a decade, applets 


Whatever the rea 
have failed to deliver on their 
promise to supplant HTML- 
based Web applications with 
equally portable and mobile 
but functionally superior GUI 
Web applications 
Nonetheless, although ap- 
plets may not have lived up to 
the early hype, they do lots of 
useful things. Here are just a 
few notable examples: 
@ AnywareOffice from Vista- 
Source Inc. in Westboro, Mass. 
(www.anywareoffice.com). Vis- 
taSource uses a Java applet to 
deliver Applixware, its popular 
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HOT TRENDS & TECHNOLOGIES IN BRIEF 


Applets are Java programs t 


D I IN] () 


hat download into a 


browser, then run inside the browser’s window. 
They can be used to create advanced, highly inter- 
active graphical user interfaces that plain or dy- 
namic HTML can’t render. Servlets are Java pro- 
grams that run inside a Java-based Web server 

or Java application server. Like Common Gateway 
Interface programs, servlets can deliver Web ser- 
vices directly to the browser or act as middleware 
that connects the browser to back-end services. 


into Java 
When an 
provider 


Linux office suite, 
enabled 
application 
hosts AnywareOffice, the ap- 


word 


browsers. 


service 


plications (such as a 
processor) run on the server, 
but they display in an applet. 
It’s analogous to the Citrix 
Systems Inc./Microsoft Ter- 
minal Server model, but 
don’t need to install a special 


you 


client. You can simply load the 
applet that displays your 
remote office applications into 
any browser that you’re run- 
ning 

@ QuestAgent from JObjects Inc. 
in Las Vegas (www.jobjects. 
com/products/questagent/index. 
html). 
platform search engine often 
included in HTML-based CD- 
ROM publications. A browser 
can display the content of such 


This applet is a cross- 


a publication but can’t search 
its index. QuestAgent delivers 
portable searching and elimi- 
nates the need to create and 


lage 


0 


Web page 
automatically requests 
applet download 
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PROCESSING: 
Java virtual machine 
executes code on 
local machine 
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Server sends 
applet bytecode 
to browser 


deploy a native search engine. 
@ MindTerm from Mindbright 
Technologies AB in Stockholm 
(www.mindbright.com/english 
technology/products/nindterm 
index.html). 
away from the office, without 


Suppose you're 
your laptop, and you need to 
file to your home 
Java- 


transfer a 
MindTerm, a 
based implementation of Se- 
cure Shell (SSH), enables you 
to transform any Java-capable 
browser into an SSH client that 
file- 


server. 


you can use to encrypt 
transfer sessions. 


The Rise of Serviets 
While client-side 
failing to thrive as expected, 


Java was 
another use of Java on the 
server side — quietly 
building momentum. Today, 
Java application servers power 


was 


a large and growing number of 


Web-based services. And their 
lingua franca is the servlet ap- 
plication programming inter- 


0 


Web page 
requests serviet 
function 


0 


Browser 
displays data 


face (API), which defines how 
a Java servlet interacts with its 
Java-based host. It’s 
supported, and although Enter- 


widely 


prise JavaBeans is now emerg- 
ing 
simpler servlet API creates a 
denominator 
Java compo- 


useful common 
for server-side 
nents. 


Because they’re written in 


Java, servlets make an excel- 


lent platform for network ser- 
vices. Java programmers don’t 
manage memory directly, so 


servlets avoid the buffer-over- | 
run errors that create security | 


vulnerabilities in software 


written in C or C++. Java’s sim 


ple mechanisms for exception 


handling and multithreading 


encourage the development of | 


reliable and responsive net- 
work services. 

Servlets also have an archi- 
tectural advantage that enables 
them to fully exploit the intrin- 


sic benefits of Java. If an applet | 
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Server 
gets request, 
passes along 

to servlet 


0 


datetransfe Server sends 


results to browser 


send your ideas to quickstudy@computerworld.com 


as a standard, the much | 
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sent over the wire lands in an 
incompatible JVM, it’s likely 
that it won’t function properly, 
if at all. A servlet is deployed in 
a much more controlled envi- 
ronment. Because the JVM is 
a known quantity, there are 
no compatibility problems. 
What’s more, the environment 
that surrounds that JVM can 
enhance the servlet’s perfor- 
mance. Some Java application 
servers can compile servlets to 
native code, boosting execu- 
tion speed dramatically. Others 
run multiple JVMs in parallel, 
sometimes multiple 
processes in the host operating 


across 


system. These strategies en- 
hance the service’s scalability 
and fault tolerance. 

Because servlets are simple 
and effective, other technolo- 
gies use them as_ building 
blocks. Consider Java Server 
Pages (JSP), a templating sys- 
tem that injects Java logic into 
HTML pages, as with Micro- 
Corp.'s Active Server 
Pages. The first time a JSP host 
a request for a JSP 
page, it compiles the Java logic 
and HTML content into a 
servlet. Thereafter, requests for 
the page are answered by the 
servlet. 

Java applets may yet fulfill 
their original De- 
mand for a richer Web GUI is 
growing, and no other technol- 
ogy on the horizon offers Java’s 
cross-platform, cross-browser 
portability. Meanwhile, howev- 
er, Java servlets are an unquali- 


soft 


receives 


promise. 


fied success. D 

Udell is the author of Practical 
Internet Groupware. Contact 
him at udell@monad.net. 
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>. AS CPO AT COMPUCREDIT, Mark 
on Lawrence says his job is to keep 
>> the company from “stubbing its 
> toes on privacy and ending up in 
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ERHAPS IT’S ONE OF 
information tech- 
nology’s best kept 


“You need the ability t 
work with other business 
units inside the company, each 
career secrets, since 
today, only approxi 


of which has their own agen 


das,” Lawrence says. “Y 


mately 75 people fill the posi- 
tion of chief privacy officer 
(CPO). 

But that number should 
jump a hundredfold next year. 
Medical and financial compa- 
nies will be scrambling to 
comply with two new con- 
sumer-data privacy acts that 
were passed last year. 

The CPO is definitely a job 
whose time has come, accord- 
ing to Alan Westin, a professor 
of public law and government 
at Columbia University in 
New York, and president of 
Privacy and American Busi- 
ness, a privacy research and 
professional services group in 
Hackensack, NJ. 

Many CPOs hail from legal 
and consumer-affairs back- 
grounds, such as Kirk Herath 
at Nationwide, an insurance 
company in Columbus, Ohio, 
with $115 billion in financial 
assets. But because these new 
regulatory issues translate 
into technology initiatives 
such as customer relation- 
ship management (CRM), 
help desks and information 
audits, CPOs also get recruit- 
ed from IT. 

This latter path is the one 
taken by Mark Lawrence, IT 
director at CompuCredit 
Corp. in Atlanta, where he 
became the $150 million cred- 
it-card company’s first CPO 
in June. In his new role, 
Lawrence's chief directive is 
to keep CompuCredit from 
“stubbing its toes on privacy 
and ending up in the press,” he 
says. His first order of action: 
education. 

Currently, Lawrence is 
putting the finishing touches 
on a privacy code — an easy- 
to-understand set of employee 
guidelines that the company’s 
300 employees will be re- 
quired to read and sign 

“The biggest challenge right 
now is education of the entire 
workforce. Being that we’re 
a credit-card operation, we 
have everyone from execu- 
tives to marketing to customer 
service and collection agents 
handling customer data,” ex- 
plains Lawrence. “Everyone 
needs to know our position on 
privacy, how they fit into that 
picture and what their respon- 
sibilities are to protect cus- 
tomer information.” 


the press” 


Keepi 


Sec 


Lie, 


rets 


Today, few professionals hold the title of chief privacy 
officer, and many who do come from legal backgrounds. 
But that’s changing in the wake of new privacy regula- 
tions that impact how a company handles and stores 
sensitive data. By Deborah Radcliff 


JUST THE FACTS 


Title: Chief privacy officer/director 
of information technology 


Reports to: Chief operating officer 


Lawrence must also inter- 
pret the jargon-filled Gramm- 
Leach-Bliley Act that was 
passed last year to protect 
consumer data in the financial 
industry, while keeping up 
with privacy laws state by 


| state and overseeing the tech- 


nical initiatives required to 
support compliance. The task 
is one that “no amount of caf- 
feine” makes any easier, he 
says. Some of these IT initia- 
tives include the following: 


w Building a channel to send 


| compliance notices to Compu- 


Credit’s 1.8 million cardhold- 
ers, possibly with monthly 
statements. 

w Beefing up the company’s 
automated voice response and 
CRM systems for an expected 
onslaught of customer in- 
quiries once the notices are 
sent out. 

g Creating a channel to sup- 


port thousands of customer 
requests for access to their 
data, as noted in the compli- 
ance letters. 
wg Tying application develop- 
ments and system changes 
into a privacy review process. 
w= Revamping system auditing 
processes to include data pri- 
vacy audits. 

In addition to oversight 
of these initiatives, Lawrence 
is also learning how to diplo- 
matically say, “No way,” like 
he did recently when the 
marketing department said it 
wanted to send customer in- 
formation to one of Compu- 
Credit’s vendors. 


need to understand that mar- 
keting, as it should be, is 

ven to bring new products to 
market quickly. That means 
taking two very different 
agendas and making them 
work together.” 

Because the legal issues are 
so challenging, Lawrence says 
he’d never recommen 
an IT leader take this job un 
less that person had access to 
strong, in-house legal counsel 
That’s why most companies 
hire their CPOs out of the le 
gal/regulatory departments 
But then those legal eagles 
have the disadvantage of not 
knowing technology 

Take Nationwide, for exam 
ple. With 35,000 employees 
worldwide, Herath faces a 
daunting challenge, not the 
least of which is emy 
training — a challenge th 
1,000 times bigger than that of 
CompuCredit. He must also 
devise a mechanism for dis 
pensing federally required 
privacy and recourse inform: 
tion to 14 million customers 
worldwide 

“The implications of the 
new privacy reg 
ulations are 


Can CPOs be 

forces? Or are 
Mem 

er eg 

Tomy 


huge, mind-bog 
gling.” Herath 
says. “We're in 
an information 
age, and our 
work in insur- 
ance is predicat- 
ed on ali types of information 
from all types of sources. 
“We're looking at Web- 
based technology 
line training to at 


to stream- 
least 98% of 
our employees. And we're try 
ing to lay in the procedures 
like Web-based Q&As and 
more help desk personnel, 
to handle at minimum a 19 
increase in inquiries from 
customers asking for access 
to their records,” Herath says 
Even with their disparate 
backgrounds, Herath and 
Lawrence share a few traits. 
One of those is knowing who 
to call for advice. Both also 
report to high-level executives 
and board members, whose 
support is key to any CPO’s 
effectiveness, according to 
Westin. And both have been 
too busy with their positions 
to consider what, if any, their 
next career moves might be. DB 
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The right stuff. 
The right place. 


x 
pe 


When opportunity meets talent, amazing things can happen. Just ask 
Michael Nolan from NCR's Waterloo, Canada office. “The people 


Passionate About Making A Difference. 


at NCR, and the.company, drive me to try and make a difference 
aaa Or ha BETS by far the most rewarding company I've ever been 
associated with.” It's just this sort of passion for making a difference, 
for getting things right,.that makes us different. But then, NCR 
has always been about finding solutions. Innovations. "NCR 
is propelling me into the future,” says Michael. The countdown has 
already started. 


An Equal Opportunity Employer, M/F/D/V 


Talent is the fuel of the new economy. 
Fill up with ITcareers. 


ITcareers and IT careers.com can put your message in front of 2/3 of all US 


IT professionals. If you want to make hires, make your way into our pages. 


Call Janis Crowley at 1-800-762-2977 


Computerworld + InfoWorld * Network World 


IT CAREERS 


DOR AOU AND 
DU CU AITO! 
DO YOU KNOW 


J NCR 


Infosys International, a 
Plainview, NY based IT 
mplementation corp. has 

1ediate need for exp’d. IT 
professionals in (A) or (B) 
A): Informix-Online-5.x 
Advanced Informix 4GL 
Informix-Online Dynamic 
Server 7.24UC8, Delphi 
Unix SVR4; (B): Lotus 
Notes Domino/Domino 
Rel.5, Synthesis, XML 
JScript, Cactus, WebFocus. 
Travel reqd. Please send 
resume & salary expecta- 
tions to HR, 110 Terminal 
Drive, Plainview, NY 11803 


+ November 13, 2000 


EI 


PROGRAMMER 
ANALYSTS needed 


to design, analyze and 
program ma 
databases a 

systems using Ass: 

D /OBOL on 
naintre 
plattc 
experie 


Must 


s. Pat Redington, Jot 

3061102, DEPART 

OF WORKFORCE 

SERVICES, 140 East 300 

South, Fifth Floor, Salt Lake City 
Utah 84111 


: 
SOFTWARE 
ENGINEERS 


needed for design and 
| development of Internet 


applications using Visual | 


C++, Visual Java and 

| Microsoft's COM 

| (Common Object Model) 
technology. Masters 
required in Math 
Computers, Engineering 


| or any other related field | 


| of study, plus one yr 
| exp. Must have proof of 


legal authority to work in | 


| the U.S 
Salary: $57,000.00/yr 
for a 40 hr. work week 
Interested applicants 

| send resume to the 

| Oklahoma State 

| Employment Service 

| 11654-A East 21st St 
Tulsa, OK 74129 
(1.D.#7209); ph#(918) 
437-4473. Refer to Job 
Order #435135. Ad paid 
by An Equa! Opportunity 
Employer 


1-800-762-2977 


SOFTWARE ENGINEER 
Analyze, d p, code, test 
rcial apps. 
ledge of 


ycle. Dvip 


lement c 
sin n-depth 
system dvipmt life 


3ns based 


sig n specs 


evaluate & modify 


SOFTWARE ENGINEER 


Analyze, design, dvip, code, test 

& implement commer« apps, 
je 

cle. Dvip 

J on specs. Ana- 


aluate & modify existing, 


efficient & 

f systems. M.S. 

i., Comp. Eng., Elec 
1e 
e above di $5 
of progress y resp. exp. in 
ob offered or as a Programmer 
Analyst, Systems Analyst or 
Software Consultant will be 
accepted in lieu of M.S. degree) 
Must have working knowledge of 
Java, HTML, C, UNIX and VAX 
High mobility 
hrs/wk, 8 a.m 5 p.m 
yr. Qualified applicants 


preferred. 40 


Team PA N 
St., Unio PA 15401-3513 


Job Order No 


fe multiple openings 
for exp'ed IT professionals in the 
following areas (various skills 
combination reqd.) JavaScript 
Jaguar, PowerDynamo, WinNT 
Unix Server, Informix, MFG/PRO, 
SQL Server, Sybase, FoxPro. 
Progress, Oracle, ObjectCycle 
PowerBuilder, Btrieve. Some 
positions require MS or equiv 
CS, Engg, Math, Bus. Admin, or 
rel. field while others require BS 
yf equiv. as above. Pay 
com surate with exp. Foreign 
equiv of educ. and/or combination 
of educ/exp. will be accepted 
Travel/relocation reqd. Resumes 
& salary ex ns to HR 
291 Heron A dle: 
34108 


IT professionals with a min 
of 2 yrs industry experience 
in ES/9000 CL/400 
SQL/400 SDA RLU 
SUBFILES ISPF/PDF, 
QMF, T-SQL needed. Travel 
reqd. Please send resume 
& salary reqmnts. to HR 


4701 MacCorkle Avenue 


SE, Charleston, WV 25304 


Computer Technology Consultants 
Opportunities are available for 
sltants nationwide in the 
following areas: Oracle, SAP, JD 
Peoplesoft, object 

nologies, & 

electronic commerce. Apply to 
Ref# 818, J. Eckert, Cap 
Gemini, Ernst & Young, 1280 
Wall Street West, Lyndhurst, NJ 


07071 
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Live your IT Nirvana. 
Find it at dice.com. 


Dice.com makes your IT Nirvana come true because we focus exclusively on quality 
high tech jobs with only the best companies. And we offer great career tools 
completely free of charge. So, we make it easy to find the perfect IT job. the biggest 
paycheck and. if you're lucky. spiritual enlightenment. What's your IT NirvanaP 


ee este ge dicecom 


igh tech jobs online 
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You live in a big city and 
work on a small network. 


How about switching 
ie) a2 
that around? 
NETWORKWORLD, 


COMPUTERWORLD, 


it jobopps.corpsouth@statefarm.con ae 
ee AND INFOWORLD 


Or visit our website al ee HELP You Do 


statefarm.co 


A BETTER Jos. 


Now Let Us Hep 
Get there with State Farm. 
You GET ONE. 
CALL: 
-800-762-29 
It’s Fast. It’s Huge. aagegedd 
It Crosses Worlds (D careers.com 


&. Dimensions. tee 


IT ees 
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KAISER PERMANENTE« 


Tomorrow: a Cure 
Today: the IT infrastructure 


| that it’s founded on | 


What matters most? Your family, your work. Your health. Today, everywhere you look, technology is making the difference in all these areas 
At Kaiser Permanente, we're dedicated to enhancing health care delivery through state of the art information tools. And the 3,500 experts 
at Kaiser Permanente IT are at the heart of that mission. Getting life saving information where it needs to go. Talk about mission critical, 
target Kaiser IT. 

Bring your expertise to Kaiser Permanente today in one of the following disciplines. Become involved in exciting initiatives such as Web 
development, extranet, intranet, enterprise data security solutions, network planning, client/server-based projects, network infrastructure, 
project management and technology planning. 


Position Locations: 
California, Colorado, Georgia, Hawaii, Maryland, 
Ohio, Oregon, and Washington D.C. 


PC LAN 

Seeking field technicians, administrators, desktop support specialists, 
LAN consultants and analysts with expertise in NT, Novell, TCP/IP, 
Lotus Notes, MS Exchange/Messaging, e-mail, LAN and WAN. 


NETWORKING 

Seeking administrators, consultants, WAN engineers, network design 
analysts and security consuliants with expertise in UNIX®, Cisco hubs, 
routers, bridges, switches, Fast Ethernet, Token Ring, Frame Relay, 
ATM, AVR and Telephony. 


TELECOMMUNICATIONS 


Seeking analysts, consultants, software technical specialists and project 
managers with expertise in UNIX, Cisco hubs, routers, bridges, 
switches, voice, data, IVR, CTI, ACD, PBX, Nortel Passport, ATM, 
Frame Relay and Call Center. 


DATABASE ADMINISTRATION 

Seeking professionals with experience in a large, complex multi-vendor 
database environment who possess skills in any of the following: 
Oracle, DB2, Sybase, IMS, physical database design, DBMS utilities in 
UNIX or MVS environments; O-O methods preferred. 


DATA ANALYSIS 

Seeking professionals with experience in logical database design, data 
modeling/Entity-Relationship diagramming, meta-data management 
and ERWin/Platinum; O-O methods preferred. 


Seeking professionals with experience in Oracle, Essbase, Business 
Objects (Sequent a plus), data warehouse design and data transforma- 
tion/extraction. 


APPLICATIONS DEVELOPMENT 


Seeking programmer analysts, systems programmers, systems analysts, 
application developers, group leads and operations specialists with 
expertise in PowerBuilder, C++, C, Visual Basic, Sybase, Oracle, UNIX, 
IEF/Composer, COOL:Gen, ADS Plus, MUMPS, SAS, EDI, MQ, OBDC, 
OCC, Corba, COBOL, COBOL II, JCL, MVS, DB2, CICS, Model 204, 
IMS, MANTIS, Pega Systems, Tandem, TAL, DEC/VAX/VMS, 
PeopleSoft and Tesseract. 


BUSINESS ANALYSIS/ 
PROJECT MANAGEMENT 


Seeking analysts, consultants and project managers to oversee projects 
utilizing MS Project with expertise in planning and implementation 
within an IT environment. 


WEB DEVELOPMENT 


Seeking senior Web developers to develop Web applications using 
Java™, application servers, and Oracle in a UNIX environment 


SOFTWARE ENGINEERING/ 
SYSTEMS ARCHITECTURE 


Seeking expertise in emerging technologies for enterprise systems on 
an O-O or UNIX platform. 


LOTUS NOTES 
ADMINISTRATION/DEVELOPMENT 


Seeking administrators with experience in large-scale Notes 
infrastructure. Experience with R5, Domino 4.X or higher, hands-on 
administration, troubleshooting, replication, mail routing, calendar and 
scheduling probiems. Development candidates should possess strong 
Lotus Script and NT expertise. 


TECH WRITING/INSTRUCTIONAL DESIGN 


Seeking experts in Adobe Illustrator®, Microsoft Office Suite, HTMI 
and Visio. 


UNIX SYSTEM ADMINISTRATORS 

Seeking UNIX System Administrators with at least 3 years of system 
administration experience in AIX and/or Solaris”. 

Find out more about Kaiser Permanente Information Technology by 
visiting www.kp.org/jobs; click on “IT Division” tab. Submit one 
resume only, by e-mail to: kpitjobs@kp.org. The tangible and 
intangible benefits of working for an organization of our size and scope 
will change your career perspective in a healthy way. Affirmative 
Action/Equal Opportunity Employer. it wademarks belong to their respective companies 


org/jobs 
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more challenge: more opportunity. more success. 


get more from your career 


Bring your unique skills to 
VoiceStream Wireless and experience 
more of the chaHenge, opportunity 
and success you Crave in your Career 
in an atmosphere that rewards 
individual growth and team 
performance. By. attracting and 
retaining the best and. brightest 
talent in the industry, we guarantee 
our Customers enjoy more airtime, 
more featutes 

and more valuable service than’ any 
other PCS carrier 


Combining the precise blend of 
technology, strategy and innovation 
VoiceStream has-emerged as a 
premier name in the 
telecommunications industry. Now 
the world’s largest GSM carrier, in 
terms of pops, VoiceStream is well 
positioned for future success 
Building-on our existing strengths 
we will. continue to expand at a 
spectacular pace across the 
nation—strengthening our image in 
existing markets and. breaking new 


grotind in others 


Online applications may 
be completed on our website for 
immediate consideration 


eA 


ora tare fre nM life. 


www.voicestream.com/jobs 
VoiceStream is an equal opportunity employer. 


It’s Time 


We have the following prime opportunity available 


NetWare/NT/UNIX Device Driver 
A Development Engineer 


as 


n in Nashua, NH 


Japtec by e-mailing your resume 11 


Attn: Human Resources 
E-mail: jobsnh@adaptec.com 
We are } ity em 


M/F/D/V 


Jadaptec 


www.adaptec.com 
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DIRECTOR, 
TECHNICAL SERVICES 


t service to deliver multi-channel TV program 
DIRECTV became the fastest 
juct introduction in U.S. history, surpassing product 
5 of the VCR and CD player. Now with 9 million customers, we're planning 
t stop on the digital frontier and with your skill and ideas, there’s no limit to 


sh. In our first two yee 


how far we can go 


In this critical assignment, you will direct employees engaged in technical support, 

electronics equipment 
We'll rely on you to 
n and staff tech support activities; establish/monitor ongoing 
ct procurement and monitoring of electronics and com 
ms and services; and coordinate studies to determine current 
This opportunity demands an effective leader with an 
undergraduate degree and 10+ years of engineering and tech support experience. A 
broad grasp of administrative process, in-depth knowledge of tech support systems, 
equipment, procedures and techniques and a strategic understanding of broadcast 
operations objectives are essential. The ability to translate plans into tech support 
ll as organize and direct skilled and creative tech support techni- 


SO necessary 


ncluding the installation, maintenance and modi 


LANs/WA 


d in the transmission of data and signals 
ize, control, ple 
ts and techniques; 
puter equipment, sys 


and future requirements. 


programs as 


cians and professionals is 


DIRECTV offers you the opportunity to work for a high-growth company, which is deliv- 
ering the future of entertainment today! Please send your resume, indicating job code 
2 NB, to DIRECTV, Inc., Attn: Human Resources, 12800 
Culver Bivd., Los Angeles, CA 90066 or email (text format 
only, no attachments) to labc-hr@directv.com. EOE M/F/D/V 


Check out our website at 
www.directv.com. 


DIRECTV 


PRESENTING OR. JOHN SULLIVAN 


International Recruiting Specialist 


Fast Company Magazine crowned him “the Michael 
Jordan of our industry.” You can see why he measures up. 
A luminary. An expert on effective recruiting in the world’s 
tightest job market. Now, he’s on your bench. 

This free one-hour webcast is “must see” viewing for 
anyone connected with IT recruiting. Managers, staffing 
managers, recruiters, anyone. Register today at 
www.!Tworld.com/ITwebcast/masters.html. 


IT’S FREE. (1S 24/7. 1T°S ON-DEMAND 
ANO IT'S ONLY AT ITORLO.COM. 


Produced by 


mmm) |e 


| SkillsVillage 


In association with Sponsored by 





PUT YOUR OWN STARS ON STAGE 


Announcing The ITcareers Achievement Showcase 


This is where advertising and retention 
Ua a 


Build retention into your IT advertising 
program through public recognition of 
your top performers. Use messages on 
how you value employees - as you attempt 
to attract new ones. 


The ITcareers Showcase will have prime 
position within our weekly advertising 
section - appearing in Computerworld, 
InfoWorld and Network World. 


Sg s 


These pages will honor: 


* Award winners for technology or 
ema eerie beacon ens 
* Award winners for community service 


* 


Inara ere) 
* Special assignments and promotions 


SU eracei avai oli meen heme rece: 
for employers who understand that your 
most important target market is the IT 

professional who already works for you. 


For information on our special 


(D careers 


Teceeiee em mrics 
eR Olea (4 
1-800-762-2977. 





Avon Products, Inc. 
New York, NY 


The backbone of Avon Products is a 
worldwide sales force of 3 million indi- 
viduals. The challenge is how to use 
information technology to help each of 
these direct sales people grow and 
personalize their business. “Using our 
e-business capabilities we can help 
sales people grow their business, but 
we can also make the system more 
efficient for them,” explains Harriet 
Edelman, senior vice president and 
chief information officer 


Unlike many e-enabled consumer busi- 
nesses, Avon is a vertically integrated 
company. This includes research and 
development, manufacturing, ware 
housing, inventory control, merchan- 
dising and pick and pack. “These are 
the areas that allow the business to 
operate more efficiently, and the 
systems we’re developing include 
customer relationship management 
supply chain management, marketing/ 
product development, decision support 
and human resources applications,” 
Edelman says 


However, Avon is not developing a 
one-solution-fits-all strategy. Edelman 
says the nature of the business varies 
by geographic region, whether in 
Poland, Brazil or the United States 
“Those who work in IT at Avon get 
exposure to different IT infrastructures 
and business models. It’s a rich 
opportunity,” she says 


Edelman needs hot skills - network 
development, telecommunications, 
programming and business function 
experience. “We may develop or offer 
package solutions, but because of the 
global nature and those varied infra- 
structures, there is a lot of opportunity 
for customization development,” she 
says. “We need people who under- 
stand our role as a big solution 
provider and who have a sense of flex- 
ibility about solutions. We evaluate 
many choices. There isn't one Avon 
around the world, so we have to be 
flexible. We are migrating to solutions 


Were 


sets that are 

/ affordable and 
that can be 
customized to 
match the 
footprint of 
the business, 
whether in the 
Philippines or 
in Mexico.” 


Avon currently employs 1,200 IT 
professionals worldwide, and its 
current openings are primarily at the 
Technology Center in Rye, NY. “It’s a 
great place to move into entirely new 
career areas, under one roof,” says 
Edelman, who has worked in market- 
ing, operations, field sales and IT 
“We pride ourselves on paying 
attention to the details of what makes 
Avon a great place to work. We are 

a company that has built the careers 
of individuals, but particularly the 
careers of women. We have long 
years of history in our commitment 
to those who work with Avon.” 


BestBuy.com 
Eden Prairie, MN 


Since its launch in June, BestBuy.com 
has been striving to become a highly 
stable e-commerce site, one that 
meets the needs of customers, but 
that also is a reliable site that can be 
updated on a continuous basis. “We're 
currently adding new product lines and 
are wrapping up a significant etfort to 
ensure that we are scalable for the 
holidays,” says Harold Knutson, vice 
president and CIO. “Now we're look- 
ing ahead in terms of what we need to 
do over the next two years.” 


The planning stage creates lots of 
opportunities for IT professionals who 
will be developing IT solutions to busi- 
ness issues. “As creative and exciting 
and energizing as the e-commerce 
environment is, eventually it boils 
down to engineering the specific 
capability,” adds Knutson. 


The company is aggressively hiring in 
an effort to change the mix of outside 
contractors and full-time employees. In 
the next six months, Knutson plans to 
hire approximately 50 individuals. “It’s 
easy to say that they need to have the 
technical skills - distributed systems, 
coding, network protocol skills. But to 
be honest, | pursue the best athletes 
vs. the best position players. My view 
is that this environment can change 
dramatically over the next year or two. 


| need people who can contribute 
immediately, but who can also deal 
with a changing business landscape 
As needs evolve, you'll grow from what 
you're doing today to what we'll need 
tomorrow - even if | can’t yet tell you 
exactly what tomorrow is. There are 
people who love that kind of environ 
ment, and others who can’t tolerate it.” 


Knutson looks at resumes, also, for 
demonstration of personal commit- 
ment to ongoing growth. “I'll see that 
not only through the variety of projects 
you’ve worked on but what you’ve 
taken on as a volunteer and through 
your personal life. 


“You'll be joining a broad team of 
individuals who are creating a sense 
of community here that is energetic, 
forward-looking and eager to leverage 
technology on behalf of the business 
Everything we do manifests itself in a 
business capability of some sort. Our 
goal is to provide you the opportunity 
to make clear what your interests are 
and where you'd like to grow, and then 
engage you in work that allows you to 
develop new skills and keep moving.” 


The MONY Group 
Syracuse, NY 


In less than 12 months, The MONY 
Group has further established its 
e-business strategy, worked toward 
a January 2001 implementation of 
ERP and installed a new instracture 
designed for growth and more 
capability. It’s been another year of 
IT at MONY - but only because IT 
is helping the financial services 
company to reach its goal of 
providing intimate service to 

more than 800,000 customers. 


E.P. Rogers, vice president and CIO at 
MONY, says the company spent about 
four months looking across the corpo- 
ration and its subsidiaries to determine 
where it wants to be five years from 
now in terms of e-business capability. 
“We examined how we wanted it to 
work for us and for customers and 
what pieces are necessary to make it 
happen,” explains Rogers. “In all we 
identified 11 e-business projects, the 
first of which is customer relationship 
management. We needed this piece 
before we could go very far with our 
e-business strategy. We had to get on 
it quickly, learn to operate in Internet 
time and set 90-day plans to continu- 
ously challenge ourselves.” 
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For a firm that boasts of some of the 
industry’s top high performance work 
teams, the work has begun. Customer 
information files and some front-end 
marketing tools are in line to roll out, 
and Rogers and his team are selecting 
product solutions between now and 
year-end. “We see the price of admis- 
sion to serving our customers as the 
ability to provide information 24 hours 
a day, seven days a week,” says 
Rogers. “We had to offer that up right 
away, and now customers can deter- 
mine the cash value of their variable 
annuities online. In 2001 we'll be offer- 
ing service capability online that 
allows customers to move money from 
fund to fund and make simple account 
changes, such as address. These are 
not the reasons, though, that people 
will choose to do business with us. We 
have to meet or surpass customer 
expectations, and that’s the direction 
of our e-business strategy.” 


Currently MONY has about 380 peo- 
ple working on IT projects and plans to 
hire an additional 10 percent in the 
short-term. Employees can move from 
project to project, taking skills gained 
to the ERP launch to the e-business 
project. “Some of the technical skills 
we need include HTML, Java, Visual 
Basic, Java Script. What’s really 
important is that we work in high per- 
formance work teams so there is a 
high degree of personal accountability 
We need people who work well in this 
type of environment and who own 
what they do.” 


Listed as Number 11 on Computerworld’s 
list of “Top 100 IT companies,” 
MONY’s leaders believe the number 
one reason they have low turnover 
(just 7 percent) and high employee 
satisfaction is the work atmosphere. 
“We have great people who are 
selected by the teams. They are peo- 
ple who are committed and like work- 
ing here. We commit to two weeks 
training per year for all employees, but 
in the technical skills it’s actually three 
to four weeks and we pay for all certi- 
fications,” adds Rogers. “It’s a joint 
commitment to your career.” 


Eas 


For more job opportunities in E-business, turn 
to the pages of ITcareers. 
© If you'd like to take part in on upcoming 
iTcareers feature, contact Janis Crowley, 
650.312.0607 or janis_crowley@itcareers.net. 
© Produced by Carole R. Hedden 
© Designed by Aldebaran Graphic Solutions 
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Enter a whole new worl 
of opportunity. 
— fast climb and bap 
continu set the 
j idard in 
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Cyberwar 


mation 
have also been successful in 


campaign, and they 


keeping major service pro- 
viders off-line through various 
denial-of-service techniques. 

Just 
tacked 
Inc. However, a spokesperson 
for the Murray Hill, N.J.-based 
company said that no damage 
was done and that it was “busi- 
ness as usual” for the site. 

A spokesman for the FBI 
confirmed that the attacks 


Hacker Alert 


Pro-Palestinian individuals 
and groups involved in 
cyberattacks include: 


® ReALiST 


last week, hackers at- 


Lucent Technologies 


® Project Gamma 
® Dodi 

® Unity 

™ Xegypt 

® Hezbollah 

® Ummah.net 

® Arab HaxOrs 


® al-Muhajiroun (headquarters 
in London, with chapters in the 
US.) 
“have moved beyond what 
we've seen in the past in terms 
of sophistication.” In fact, some 
hackers have been sharing in- 
formation on specific port vul- 
nerabilities on individual sys- 
tems, the spokesman said. 
Security and intelligence ex- 
perts warn that pro-Palestinian 
have entered a 
phase in the conflict that aims 
to attack “Zionist” 
merce sites in the U.S. and Is- 
rael, as well as other high-pro- 
file sites that could help publi- 


groups new 


e-com- 


cize their cause. 

An intelligence report  is- 
sued by Internet security firm 
iDefense Inc. in Fairfax, Va., 
uncovered evidence on hacker 
message boards that popular 


U.S. Web sites such as those of 


Yahoo Inc., CNN and AT&T 
Corp. might be on the list. 
Those companies declined to 
comment. 

There are also clear signs 


that plans may be in the works 
for a major denial-of-service 
attack against U.S. sites. A pro- 
Palestinian group 
Unity has said publicly that if 


known as 


ing Zionist e-commerce sites 
with millions of dollars of loss- 
es in transactions.” 

In another case, a member of 
the Xegypt hacker group who 
goes by the ReALiST 
posted a message on an Arab 
hacker bulletin board asking 
for help to do just that. 

“'m_ thinking of installing 
[Tribal Flood Network 3000] 
servers and doing the CNN.- 
and Yahoo.com thing 
again any one in, mail me quick 
[sic],” the message stated. 

Pro-Palestinian hackers have 
also deployed a FloodNet-type 
tool known as “defend,” and 


name 


com 


are currently using it to attack 
at least seven targets, accord- 
ing to iDefense. 

Defend requests nonexis- 
tent pages on targeted sites by 
calling for Web site addresses 
based on the current date to 
defeat Web-cache-related se- 
curity mechanisms, which in 
the past have prevented hack- 
er penetrations. 


Unheeded Warning 

The FBI and security ven- 
dors have been issuing warn- 
ings about such attacks, but 
most U.S. companies nonethe- 
unprepared for 
them, experts said. 

One recent audit showed 
that 97% of U.S. firms are vul 
nerable to the tactics being 
used by pro-Palestinian hack- 


less remain 


ers, according to Peggy Wie- 
gle, CEO of Sanctum Inc., a 
Santa Clara, Calif.-based com- 
pany that has helped defend Is- 
raeli government Web sites 

For example, Wiegle said, 
most sites don’t have security 
software installed that is capa- 
ble of blocking hackers who 
break into back-end systems 
through vulnerable Web brows- 
er applications such as shop- 
ping carts. 

“A badly protected Web site 
is like a portal into your back- 
end systems,” said Wiegle. 

And timing could be an im- 
portant factor as US. retailers 
enter what they expect could 
be a $19 billion online holiday- 
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How Companies Can 
| Pinamece Wwep Security 


BY DAN VERTON 
ITH THE peak 
online holi 
day buying 
season just 
around the 
corner, Internet security ex 
perts are urging U.S. compa- 
nies to enhance their security 
posture in light of 


threats made by hacker groups 


recent 


in the Middle East to launch an 
holy 
companies with ties to 
Israel. 
“Most 


electronic war against 


companies 


3% of their budgets on 

said Richard Hunter, 
managing vice president for 
e-metrics consulting at Stam- 
ford, 


security,” 


Conn.-based Gartner 
Group Inc. “They are getting 
lucky. Any hacker with a 
screwdriver can knock them 
The that 
been learned so far have not 


over. lessons have 
been learned by a critical mass 
of the potential victims.” 

And those lessons, accord- 
ing to a recent Gartner study 
on the Middle East hacker 
threat, are many. “When a po- 
tential threat has been identi- 
fied, standard enterprise secu- 
rity measures should be com- 
plemented by increased fire- 
wall analysis, intrusion detec- 
tion and detailed inspection of 
site usage logs,” said the study. 

Internet service providers 
and server hosting companies 
also must have the processes in 
place to quickly detect and re- 


act to denial-of-service attacks 


sales season. Any disruption to 
the holiday season would cer- 
tainly “make a 
said Richard Hunter, managing 
vice president and research di- 
rector for e-metrics at Stam 
ford, 
Group Inc. 

“Timing is key, because tim- 
ing is linked to publicity,” 
Hunter said. 

However, while attacks could 
put a temporary damper on on- 


lot of noise,” 


Conn.-based Gartner 


CE RRR IRE: 
are spending less than TIPS 


Commonsense steps _ that 
companies can take to enhance 
their security include review 
ing corporate relationships, 
such as banking arrangements 
to see if there are any links that 
might make them potential tar 
gets, said John Pescatore, re 
search director for Internet se 
curity at Gartner. 

In addition, although dis 
connecting 


Internet 


entirely from the 
isn’t 
tion, 


a practical op 
“you certainly 
need to be reviewing 
detec 


your intrusion 


tion logs more fre 

quently, conduct pene- 
tration testing against yourself 
and check your Web servers 
more frequently to see if they 
have been manipulated,” said 
Pescatore. 

The design of a company’s 
e-commerce network also 
plays a role in creating an ac- 
tive defense against hackers, 
said Allan Paller, director of re 
search at the SANS Institute, a 
security research organization 
in Bethesda, Md. “Once the at 
tack has been identified, effec- 
tive network 
sometimes 


controls 


allow some busi 
ness to continue instead of just 
falling over dead,” said Paller. 
In additon, Paller urges the 
use of 
protect customer information 


‘Reputation destruction comes 


trong encryption to 


from loss of important person 
al data belonging to clients,’ 
said Paller. “Encryption of all 
such information is really im- 
portant.” 


line sales, any large-scale eco- 
nomic impact resulting from 
such attacks is unlikely, said 
Steven Aftergood, an intelli- 
gence specialist at the Federa- 
tion of American Scientists in 
Washington. 

Martin Libicki, a defense an- 
alyst at the Washington-based 
policy think tank The RAND 
Corp., and 
added that the tactics of the 
pro-Palestinian hackers may 


said he agreed 


Steve 
Wilson 


tions , a Columbus, 


Wilson, pr 
Group inic 
Ohio 


based crisis-managemen 


ick has occurr 

For example, wl 
Bug virus brought down se 
al major e-commerce sit 
year, “too many 
were not prepared 
inything like that, a1 
sult, they 


people something 


And, if necessary, 


such 
ing to make 
be ing able 
Wilson said 

But being honest 
customers goes only 
Companies must also be 
ing to share information 
the industry at large and with 
federal law enforcement agen 
cies, said Wilson. Unfortunate 
ly, many companies are unwill 
ing to do so because of the fear 
that the news will put them out 
of business 

‘Companies have 
tion within reason to share th: 
information with other compa 
nies so that they can avoid it,” 
said Wilson There’s too 
much at risk to the economy 
for companies to hold this in 
formation. If Microsoft can ad 


mit it, anybody can.” D 


actually hurt their cause 
‘Palestinian strategy should 
attempt to separate the United 
States from Israel,” Libicki 
said. “This clueless tactic can 


not help but do the opposite.” D 


Community at 


www.computerworld.com/security 
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FRANK HAYES/I] 


1 


THE BACK PASE 


LANKLY AKIN 


Ten for the ‘ages’ 


ALL THEM THE TEN COMMANDMENTS 


S for beating IT 


age bias. We know it’s out there for over-40 IT profes- 


sionals [“Beating IT Age Bias,” The 


Back Page, Oct. 30]. 


And readers who have faced it say up-to-date skills and 


a good job history 
ways to even the odds. 


aren’t always enough. But there are 


1. Thou shalt think small. Big companies can afford the luxury of a wet- 
behind-the-ears superspecialist who has mastered the latest point 
release of Oraclel2 or Visual C# but knows nothing else. Smaller 


companies need flexibility, broad experience 
and good business sense. They may not pay as 
much, but they’ll let you create value. And your 
résumé will be read by a human being, not just 
a computer scanning for keywords. 

ll. Thou shalt think local. I 


blanket campuses with recruiters the way 


ocal companies don’t 


multinationals do. They don’t want to pay relo- 

cation expenses. They’re at the 

bottom of the list for the in-de- 

mand hotshots. Which means 

you're not competing with those 

hotshots — and your experience 
*s you an edge. 

Thou shalt think business. If 
you’ve been paying attention for 
the past 20 years, you know how 
a business really runs. Your 
young competition doesn’t. Busi- 
ness rules, workflow bottlenecks, 
real-world user needs — this is 
where you've got an edge. Use it. 
IV. Thou shalt leverage your experi- 
ence. And not just IT experience. 
If you know accounting or manu- 
facturing or sales support or have 
any other business-focused ex- 
pertise, trot it out. Technology 
knowledge doesn’t generate prof- 
its — business knowledge does 
that. And putting technology to 
work for business is what IT is 
about. 

V. Thou shait offer what’s needed. 

Companies need people to inte- 

grate e-business systems with 

legacy applications, not to main- 

tain dusty-deck Cobol code. They 

want someone who will think in 

terms of customers, not just users. Ask what 
they need. If you can deliver it — even if it’s not 
on your résumé — you've solved their problem. 
VI. Thou shalt get help in your job search. Get inter- 
view coaching. Get wardrobe recommenda- 


tions. Get an expert to polish your résumé. Face 


it, you’re not a job-hunt guru — if you were, 
you'd already have a job. Get all the help you 


Get all the 
help you can 
— it won't 
hurt and it 
may tip the 
balance. 


can — it won’t hurt, and it may tip the balance. 
Vil. Thou shalt call in favors. From friends, family 
and former co-workers. They’re good for intro- 
ductions, recommendations and inside dope on 
job prospects. They owe you — and now is the 
time to collect. 
Vill. Thou shalt work the phone. Salespeople have a 
name for it: “cold calling.” You call a company, 
introduce yourself, ask what 
they’re looking for, find out who 
to send your résumé to, make 
small talk. Sure, you'll hate it; 
everybody hates making cold 
calls. But that’s how you turn up 
job leads that nobody else — 
including you — knows about. 
IX. Thou shalt be energetic, aggres- 
sive and positive. When employers 
look at you, they want experi- 
ence, practical smarts, even wis- 
dom. But they also want to know 
you can keep up with the kids. 
And they want to know you can 
work with those kids, and even 
lead them. Get pumped up. Go in 
strong. Close the deal. 
X. Thou shalt consider consulting. Ii’s 
amazing how many companies 
that would never think of putting 
an old fogy like you on the pay- 
roll will pay twice as much for 
you as a hired gun. 

And if you're still employed 
but hearing rumblings that older 
workers like you are about to get 
the ax, there’s an eleventh com- 
mandment: 

Xi. Thou shalt get a lawyer. A good 

one who specializes in employ- 
ment law. It may sound nasty, and it might kill 
your chances for future promotions at your 
company. But then, so would landing in the 
street — wouldn't it? D 


Hayes, Computerworld’s senior news columnist, has 
covered IT for more than 20 years. His e-mail address 
is frank_hayes@computerworld.com. 


~ COMPUTERWORLD November 13, 2000 


HOT VOTE To shave its IT bud- 
get, this county government 
goes with a Brand X vote-count- 
ing machine, says an insider 
pilot fish. To save more money 
“and make the eco types happy,” 
the ballots are printed on recy- 
cled paper. The weekend before 
election day brings 14 inches of 
rain, and now the damp recycled 
ballots won't feed through the 
cheap reader. Solution: Staffers 
grab handheld hair dryers and 
blow-dry 20,000 ballots. 


TAIL OF HORROR Help desk 
gets a request from a user on the 
factory floor for a replacement 
mouse. What happened to the 
old one? asks the help desk pilot 
fish. Seems a worker accidental- 
ly ran over it with the big riding 


| vacuum cleaner. “All that was 


left was the frayed tail,” reports 
the fish, “and the cover for the 
ball shooting across the floor.” 


UNDER WARRANTY A Sun 
SPARC Ultra 5 dies, so IT calls 
for service and a repair guy 
promptly arrives. Pilot fish real- 
izes the repair guy doesn’t actu- 
ally work for Sun when he opens 
the computer, looks inside and 
asks, “What kind of Pentium is 
this?” 


BAD NOISE Pilot fish on an 
errand in the computer room 


— 


notices the UPS indicator is on. 
“We're running on battery and 
have maybe five minutes left be- 
fore it’s drained,” he says. A little 
quick investigation shows some- 
one apparently tripped over the 
UPS power cord and pulled it out 
of the wall. “Didn't the alarm go 
off?” fish asks computer-room 
staffer as he plugs it back in. 
“Yes, it makes a really annoying 
noise. | got sick of it,” says the 
staffer. “But if you press this but- 
ton, it shuts up.” 


GOOD NOISE Every two 
months, one billing clerk at an 
auto parts retailer asks for a new 
keyboard. Help desk pilot fish 
gets curious, so he takes an 
elevator ride to check it out. 
While he talks with the user, he 
sees the problem: As the clerk 
removes staples from batch 
invoices, she drops them into 
her keyboard. Seems she didn’t 
want to chance missing the trash 

can and getting the staples 
stuck in the carpet. “Plus,” she 
adds, “the staples sounded nice 
inside the keyboard.” 


Sharky likes the kind of true IT 
tales you send to sharky@ 
computerworld.com. You get 
a Shark T-shirt if your story sees 
print - or if it shows up in the 
daily feed on the Web at 
computerworld.com/sharky. 


‘The 5th Wave 


Let's see that aivovuch 
effect again. 
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DIGEX 


THE ASP’s Most 
VALUABLE PARTNER 


A QUANTUM LEAP 
FOR APPLICATIONS 
HOSTING 


DiIGEX ASPwORKS FOR WINDOWS” 
MicRosOFT WINDOWS 2000 
MICROSOFT APPLICATIONS SUITE 
HIGH-PERFORMANCE COMPAQ 

PROLIANT” SERVERS 
RAPID DEPLOYMENT 
COMPREHENSIVE MONITORING 
TECHNOLOGY BETA PROGRAMS 


cdige/ 


belts | keeps e-business in business~ 
www.digex.com/application 1-800-455-2968 Ext. 305 


Where managed hosting began. 
Where managed hosting is going. 


Triple Performance 


with Oracle 9 


Application Server. 


Our high-speed cache, 
coupled with our database, 
will run your web site 
three times faster than 
IBM or Microsoft 

or we will give you 


$1,000,000 in cash. 





ORACLE 
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For important details, conditions and limitations visit www.oracle.com/guarantee 





